file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample221118-qsynlahd78
SHA256 b29f9fb6d5cc7251dbee948a2e4a644907f3a5eeca6a7f695124277572e9ceae
MD5 dfcaf76575420d3b665b271aafe80365
SHA1 6e0cef58401c70cbe80e5aaa25bfdd68a6ee2f23
SHA512 a401f2e9d763eba0eb72b903b44a212fe7dd771b932deb6c8c78c15df22aff1fb592571bf48fb78bf5b1104c74b8aa6fa3f8f4fe947927abc1aa59b217f1d1e2
SSDEEP 6144:NLtk7xO6nrxJ83MRm7pzV7W148zZ+hp0fBa1nugw:PkU+rxeMRm7PVXhp0fQ1jw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH f9ffb0d2e1b091864ff2e1d952a01652
SHA256 b29f9fb6d5cc7251dbee948a2e4a644907f3a5eeca6a7f695124277572e9ceae
MD5 dfcaf76575420d3b665b271aafe80365
SHA1 6e0cef58401c70cbe80e5aaa25bfdd68a6ee2f23
SHA512 a401f2e9d763eba0eb72b903b44a212fe7dd771b932deb6c8c78c15df22aff1fb592571bf48fb78bf5b1104c74b8aa6fa3f8f4fe947927abc1aa59b217f1d1e2
SSDEEP 6144:NLtk7xO6nrxJ83MRm7pzV7W148zZ+hp0fBa1nugw:PkU+rxeMRm7PVXhp0fQ1jw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19288

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA WriteConsoleW GetComputerNameA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA GetProcessAffinityMask FindNextFileW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringA GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc GetConsoleCP GetConsoleMode CreateFileA SetStdHandle MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing