file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221124-qhsplaae5w
SHA256 3fb6035492394069aeeb127c94a4c5002f6682ff9398a13ac8d9264e7cd63b05
MD5 42e77103e3037e3dcc277f16d91c2184
SHA1 28c9105322bad4ee4a729e459e1d83b8f345a80a
SHA512 dcdcd2102aa39cb09ad26e85e44a395bac8407757b8224c13514c9e599979737cfa35b14491aa344eac45584fa6d848b6e82b814f432497a59361f1ef1bf2335
SSDEEP 6144:lDeJuWLCYehQVEhtjZsTy9gBjh5Ao3kOuxelCvrBW:lDeJLqhQitjZsG9gtVzuxe8DM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH f5f8b5528c141838ec9275ffbf548b9f
SHA256 3fb6035492394069aeeb127c94a4c5002f6682ff9398a13ac8d9264e7cd63b05
MD5 42e77103e3037e3dcc277f16d91c2184
SHA1 28c9105322bad4ee4a729e459e1d83b8f345a80a
SHA512 dcdcd2102aa39cb09ad26e85e44a395bac8407757b8224c13514c9e599979737cfa35b14491aa344eac45584fa6d848b6e82b814f432497a59361f1ef1bf2335
SSDEEP 6144:lDeJuWLCYehQVEhtjZsTy9gBjh5Ao3kOuxelCvrBW:lDeJLqhQitjZsG9gtVzuxe8DM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27942

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc FindNextFileA TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA CloseHandle GetVolumeInformationW EnumSystemCodePagesA LoadLibraryW MoveFileWithProgressA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW DeleteFileA

user32

GetComboBoxInfo GetMessageExtraInfo GetListBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing