file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample221119-jqdr3sbb27
SHA256 44230b91ef57cce74e0973220abc564d8428c9aa742a183f69bf46fe3a6f857d
MD5 bf74e95d5f42437ee35036e4e3fcbd7f
SHA1 3cedb045920a8f11308714d78fa946bc949c1ad5
SHA512 16116e29094e6fbc97f54bffc28032bd3a0708725298b6f3ea650fd85e0828260817bd58cdd5bcd3b9aaa0b1bce529d8c75bad0cd1ce9ba68d6b246c56ef2d0b
SSDEEP 6144:FbUQTzhSfdYG8BQvoNXcO8dABZ/h+3oQ9gOU+fzYQ:OQBSFYMvoqmfA9g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH 8142040a53314e160a775160afa04a18
SHA256 44230b91ef57cce74e0973220abc564d8428c9aa742a183f69bf46fe3a6f857d
MD5 bf74e95d5f42437ee35036e4e3fcbd7f
SHA1 3cedb045920a8f11308714d78fa946bc949c1ad5
SHA512 16116e29094e6fbc97f54bffc28032bd3a0708725298b6f3ea650fd85e0828260817bd58cdd5bcd3b9aaa0b1bce529d8c75bad0cd1ce9ba68d6b246c56ef2d0b
SSDEEP 6144:FbUQTzhSfdYG8BQvoNXcO8dABZ/h+3oQ9gOU+fzYQ:OQBSFYMvoqmfA9g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetPrivateProfileIntW FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CreateFileA LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing