file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample221104-qb3afshder
SHA256 fcb4d2d2fad77fd8ec906d4397b1f231bdeb425de168f79a826d8c9faf52033b
MD5 838902e2089e88c83d8de40e3dd7a3aa
SHA1 9c8c5c4e615cdfbe036cc3a1889a5172699de518
SHA512 49fbbf693f660f06a0548335bf65f26fd64d05f3ca0bf1db58341bed8a31fbd3fa4083fb79418aa07a650f2145f5b437cb138b5351958ffdbd5f6cdd6f275665
SSDEEP 3072:UNepNRVLULapE5rd7a8YW5dcIR6ft3PXt7BeGY29BwuRnpriJ8gatA/rP:rpNLPp2I8DX5RqNPXy2DV5RD+/rP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH f786c50a05009f33c9b2a14218b2166e
SHA256 fcb4d2d2fad77fd8ec906d4397b1f231bdeb425de168f79a826d8c9faf52033b
MD5 838902e2089e88c83d8de40e3dd7a3aa
SHA1 9c8c5c4e615cdfbe036cc3a1889a5172699de518
SHA512 49fbbf693f660f06a0548335bf65f26fd64d05f3ca0bf1db58341bed8a31fbd3fa4083fb79418aa07a650f2145f5b437cb138b5351958ffdbd5f6cdd6f275665
SSDEEP 3072:UNepNRVLULapE5rd7a8YW5dcIR6ft3PXt7BeGY29BwuRnpriJ8gatA/rP:rpNLPp2I8DX5RqNPXy2DV5RD+/rP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW CreateMutexW WriteConsoleW ReadFile GetSystemDirectoryA GetVolumePathNameA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW GetFileAttributesA GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing