file[.]exe | Triage™

General

Target
file.exe
Size 221KB
Sample221117-qext5sed84
SHA256 6897941ca29d9bbf9692dd675d5ebcc4eed8ba09d023d8dadc2a57aca48512e7
MD5 c804c2d4542dda88966f69d4404e7059
SHA1 db5184541c4de7c653b7f1882cba30dd30fb8e0e
SHA512 bee1cd18cbebd9c43de5419ae6a34488a2e2c53ea98925f7531acc2127d7e8c6dcd74d2240d0462bc733a8286961b589e2bab64a07203d31f1c3c9008116b198
SSDEEP 3072:VJQuLhWnpF4544GMqV/NLZzPVPfNCjjyJj7I4Z1gwjOHeOgXoD:VJipdMqV/PTV9iyJPIa6Hc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 221KB

file.exe

IMPHASH 8f3ac9a31bed02247930b8a0bb86e691
SHA256 6897941ca29d9bbf9692dd675d5ebcc4eed8ba09d023d8dadc2a57aca48512e7
MD5 c804c2d4542dda88966f69d4404e7059
SHA1 db5184541c4de7c653b7f1882cba30dd30fb8e0e
SHA512 bee1cd18cbebd9c43de5419ae6a34488a2e2c53ea98925f7531acc2127d7e8c6dcd74d2240d0462bc733a8286961b589e2bab64a07203d31f1c3c9008116b198
SSDEEP 3072:VJQuLhWnpF4544GMqV/NLZzPVPfNCjjyJj7I4Z1gwjOHeOgXoD:VJipdMqV/PTV9iyJPIa6Hc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25575

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelW FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressW GetCommandLineA GetVolumeInformationW CancelTimerQueueTimer DeleteTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation GetConsoleTitleW GetPrivateProfileStructW GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStrings GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomW GetTickCount GetLogicalDrives VerifyVersionInfoA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

gdi32

GetCharWidth32A

Sharing