file[.]exe | Triage™

General

Target
file.exe
Size 349KB
Sample221103-3qlmgaggh5
SHA256 9eb00fa68cc2a641c2ec67224dcb168d6d527c3113182c57bbfc35036a038bcc
MD5 515d23bc1a4294c6fce00bc80cc5a0f2
SHA1 e8389a8bb101850c86a5e4f77bdcb0a2ae7d416c
SHA512 ce0e42422b63f497f77fda8cf80d5159c454eadf82f508c02fa23fc1d19de7551a6def445acb8774ae9b37db883821d451ff605eef2e3582708a4f3c30425025
SSDEEP 6144:vQ3TNfg3FqtLT5mAfUdY9tjrpYHxoea0wUVdE8H7TBeXFSJy28hcvNrU+Vb463x:vQDNGOH5mU9tHmHoeVdD7TyhWU+V/h
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 349KB

file.exe

IMPHASH ca7da7b616d2b4d3a277aecb32a135a5
SHA256 9eb00fa68cc2a641c2ec67224dcb168d6d527c3113182c57bbfc35036a038bcc
MD5 515d23bc1a4294c6fce00bc80cc5a0f2
SHA1 e8389a8bb101850c86a5e4f77bdcb0a2ae7d416c
SHA512 ce0e42422b63f497f77fda8cf80d5159c454eadf82f508c02fa23fc1d19de7551a6def445acb8774ae9b37db883821d451ff605eef2e3582708a4f3c30425025
SSDEEP 6144:vQ3TNfg3FqtLT5mAfUdY9tjrpYHxoea0wUVdE8H7TBeXFSJy28hcvNrU+Vb463x:vQDNGOH5mU9tHmHoeVdD7TyhWU+V/h
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37974

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedDecrement GetTickCount CopyFileExA GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW CancelWaitableTimer GetVersionExA FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress GetModuleHandleA GlobalAlloc SetFileTime GetConsoleAliasesLengthA GetComputerNameA GetSystemWindowsDirectoryA GetMailslotInfo GetTapeParameters OpenJobObjectW GetPrivateProfileIntW ReadConsoleInputW _lread LockFile GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW WriteConsoleW AddRefActCtx FindNextVolumeA MoveFileWithProgressA InterlockedIncrement InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedCompareExchange EnterCriticalSection GetPrivateProfileStructA EnumCalendarInfoW GetConsoleAliasExesLengthA GetNamedPipeHandleStateW AreFileApisANSI InterlockedExchange SetLastError ReadConsoleW GetVolumeInformationA OpenFileMappingA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing