file[.]exe | Triage™

General

Target
file.exe
Size 377KB
Sample221119-qwsxhsdd39
SHA256 a4b4703c12f17bdef054d08506c676542e31af522ddd1669f1cecd68fec7cb34
MD5 aab6acc6280ab339a748760886eda65c
SHA1 895cfb1d5b0df275ee43888c52e3ba460fd6f91e
SHA512 08d23bbd9acc1b7d2c6173c0021eaf4e826529008f9ab913c3dfcc32a3512924b3b7b0483d8ebb74dc246db3d2e7a2b067167c7571b723f94ef7a79396b9349d
SSDEEP 6144:1kBJqEWbhCPwWRQPQ82zcQsld0y6jpPnFwCLLObfwB:DwYWRgB2YVlsxqC3O
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 377KB

file.exe

IMPHASH 063e5449636b8762744e9ce9f5564a0d
SHA256 a4b4703c12f17bdef054d08506c676542e31af522ddd1669f1cecd68fec7cb34
MD5 aab6acc6280ab339a748760886eda65c
SHA1 895cfb1d5b0df275ee43888c52e3ba460fd6f91e
SHA512 08d23bbd9acc1b7d2c6173c0021eaf4e826529008f9ab913c3dfcc32a3512924b3b7b0483d8ebb74dc246db3d2e7a2b067167c7571b723f94ef7a79396b9349d
SSDEEP 6144:1kBJqEWbhCPwWRQPQ82zcQsld0y6jpPnFwCLLObfwB:DwYWRgB2YVlsxqC3O
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20554

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc RemoveDirectoryA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW LCMapStringW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount HeapReAlloc CloseHandle CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing