file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample221118-qthnrshd84
SHA256 3dabc5fd8210271cadd82e4bcdf7970869eda6f20567d90bb7341f13de7f0bc3
MD5 cb3ba60621baa61368a1fd95b76b93a7
SHA1 f84fd927b6c3d6e47917359a10641a6c7df9159c
SHA512 9a720fa73bb674462dfd579feb52fa6b3f249143a6cc46b217d06cc3dca10776e64396c05db0c4b5a5b2e357177f7e0d0eafd2aa1a8060563b163fc9ac54dbb0
SSDEEP 6144:fOJi9xq+kj1h92KDDPWjvZXc1R6Kh7W148zZ+hp0fBa1nugw:iiNk0KDyjxs1RNVXhp0fQ1jw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH f9ffb0d2e1b091864ff2e1d952a01652
SHA256 3dabc5fd8210271cadd82e4bcdf7970869eda6f20567d90bb7341f13de7f0bc3
MD5 cb3ba60621baa61368a1fd95b76b93a7
SHA1 f84fd927b6c3d6e47917359a10641a6c7df9159c
SHA512 9a720fa73bb674462dfd579feb52fa6b3f249143a6cc46b217d06cc3dca10776e64396c05db0c4b5a5b2e357177f7e0d0eafd2aa1a8060563b163fc9ac54dbb0
SSDEEP 6144:fOJi9xq+kj1h92KDDPWjvZXc1R6Kh7W148zZ+hp0fBa1nugw:iiNk0KDyjxs1RNVXhp0fQ1jw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19288

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA WriteConsoleW GetComputerNameA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA GetProcessAffinityMask FindNextFileW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringA GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc GetConsoleCP GetConsoleMode CreateFileA SetStdHandle MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing