file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample221104-qhsplafdg5
SHA256 fe6082ce079d0dc2c9ff2557dfe681f20c633c01dbd2c04c68849b810ad028b2
MD5 d9dece6cdea8cbf37ac9c68223ebb294
SHA1 ed6c4d0c3ce31409684ce132d1271a10230be8b8
SHA512 815b35630057925d191c03b2f3d023034f2fae29a1177ea01fcd4843b07a5b338f5bf8859cfd337b108f0710f5775669d54a2d21c34898198ccd0748f074ca99
SSDEEP 3072:YZYpw2zLME1KE5rTIycy7He9K+aiLKvICR4LTShudJXK0Ka4yAubfizUKO9H5Hif:dpRLBK2TIij6HQHoSy601HbqzG9ZHif
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH f786c50a05009f33c9b2a14218b2166e
SHA256 fe6082ce079d0dc2c9ff2557dfe681f20c633c01dbd2c04c68849b810ad028b2
MD5 d9dece6cdea8cbf37ac9c68223ebb294
SHA1 ed6c4d0c3ce31409684ce132d1271a10230be8b8
SHA512 815b35630057925d191c03b2f3d023034f2fae29a1177ea01fcd4843b07a5b338f5bf8859cfd337b108f0710f5775669d54a2d21c34898198ccd0748f074ca99
SSDEEP 3072:YZYpw2zLME1KE5rTIycy7He9K+aiLKvICR4LTShudJXK0Ka4yAubfizUKO9H5Hif:dpRLBK2TIij6HQHoSy601HbqzG9ZHif
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW CreateMutexW WriteConsoleW ReadFile GetSystemDirectoryA GetVolumePathNameA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW GetFileAttributesA GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing