file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample221104-qsc2wsffa2
SHA256 f39f2d15817e6737681cc8eed6ff57eff87a2b73ceb802f29371a94a8e709268
MD5 d47af7cf23045b19bd1f57155df21f58
SHA1 eb046911ef70d11c60551d49514cb1de70724446
SHA512 dd9c83bf59cdae530946fe560280dbdc25bb86e147a47f42108d000e1dc77b19b4add0a2526ed98e14b85797799252c64406421efaa6980f7f53abfa75f2c847
SSDEEP 3072:3RqqBIWkt+Ln7g+u5TLGbTAo6VLWtsvzRY38DNAxtzo5tCEWIfMEvxRCQ9:TBIKL0+sGbTAo6RW6VDu1onwIf7v/9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH ca312dc63bf418e898d33fe8e60ee03c
SHA256 f39f2d15817e6737681cc8eed6ff57eff87a2b73ceb802f29371a94a8e709268
MD5 d47af7cf23045b19bd1f57155df21f58
SHA1 eb046911ef70d11c60551d49514cb1de70724446
SHA512 dd9c83bf59cdae530946fe560280dbdc25bb86e147a47f42108d000e1dc77b19b4add0a2526ed98e14b85797799252c64406421efaa6980f7f53abfa75f2c847
SSDEEP 3072:3RqqBIWkt+Ln7g+u5TLGbTAo6VLWtsvzRY38DNAxtzo5tCEWIfMEvxRCQ9:TBIKL0+sGbTAo6RW6VDu1onwIf7v/9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16896

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement OpenJobObjectA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW GetConsoleAliasExesLengthW GetFileAttributesA CreateMutexW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW WriteConsoleW GetSystemDefaultLangID Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing