file[.]exe | Triage™

General

Target
file.exe
Size 291KB
Sample221104-qsc2wshfbl
SHA256 cf6b68cfff2e355702a5fd45740034313a898ebf096868aa75048ea773316785
MD5 87407f6c29240fc695fbebfd652dcda9
SHA1 98d95c2e0feebbffe0349acfb23ff52a5e861070
SHA512 5520392bfd31ed660fa1e0537507276783d2cc12c93136e5e072204d853e65c7f73f3d6eead8b9e77ae84b5116ce1a24d51c24281aa9dc3f5704d317b53dec51
SSDEEP 3072:eyYqBIwfnPLWIIbu5+0JV+cTyYB0pcs/ZAgw/wuK7b13Ii:VBIIL+bUV+nccZi/rE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 291KB

file.exe

IMPHASH ca312dc63bf418e898d33fe8e60ee03c
SHA256 cf6b68cfff2e355702a5fd45740034313a898ebf096868aa75048ea773316785
MD5 87407f6c29240fc695fbebfd652dcda9
SHA1 98d95c2e0feebbffe0349acfb23ff52a5e861070
SHA512 5520392bfd31ed660fa1e0537507276783d2cc12c93136e5e072204d853e65c7f73f3d6eead8b9e77ae84b5116ce1a24d51c24281aa9dc3f5704d317b53dec51
SSDEEP 3072:eyYqBIwfnPLWIIbu5+0JV+cTyYB0pcs/ZAgw/wuK7b13Ii:VBIIL+bUV+nccZi/rE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16896

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement OpenJobObjectA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW GetConsoleAliasExesLengthW GetFileAttributesA CreateMutexW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW WriteConsoleW GetSystemDefaultLangID Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing