file[.]exe | Triage™

General

Target
file.exe
Size 147KB
Sample221126-ql8j8aad51
SHA256 969cbe894bade6e664ebc759576a44abba87e73dc093e09b7a97ec3c1099bbb3
MD5 bf64cf006d94eea938529abb0e6b4ee8
SHA1 2808b73fcee94aaaa39240549c616f1d97eb8839
SHA512 a5d281994b61c3664cfa3d783a6f2fac17b57ac9a2fb01f69534f11dcc70ae2229a0ce7b1ce4dca2bb6ee5ae9f29f17dbcc11a721cc93ce7f0aa098a055bbf23
SSDEEP 3072:qxHNuRGCqn5Si5hL5/SxJ4aOEnr8LUwHx/r0NfuCOD:iGGCEhd/IDr8QwHdr0Ah
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 147KB

file.exe

IMPHASH 9fd3a4eaa1935ebfdb4bd4cad72d3d8d
SHA256 969cbe894bade6e664ebc759576a44abba87e73dc093e09b7a97ec3c1099bbb3
MD5 bf64cf006d94eea938529abb0e6b4ee8
SHA1 2808b73fcee94aaaa39240549c616f1d97eb8839
SHA512 a5d281994b61c3664cfa3d783a6f2fac17b57ac9a2fb01f69534f11dcc70ae2229a0ce7b1ce4dca2bb6ee5ae9f29f17dbcc11a721cc93ce7f0aa098a055bbf23
SSDEEP 3072:qxHNuRGCqn5Si5hL5/SxJ4aOEnr8LUwHx/r0NfuCOD:iGGCEhd/IDr8QwHdr0Ah
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15527

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetModuleHandleW GetTickCount VerSetConditionMask GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect SetConsoleActiveScreenBuffer ClearCommBreak GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetMenuInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing