file[.]exe | Triage™

General

Target
file.exe
Size 273KB
Sample221216-qhsplaeg44
SHA256 4e2d2f4dd505737ccf5773dd87004e846925b2c439acfdf4b05287b6cee4df46
MD5 04dab107577f1b6f67e8b02d78cb7148
SHA1 15055cfa17495325d9d7859c27682bffd442714b
SHA512 5abf5e18d33fc2b51b70977d6f99fd7e7a6660a3da7a839e87b676bc563f10c331495c6a90f785373c1fa8c31aa2d007d0d5ceea809620c4f5cab44427a5cfe9
SSDEEP 6144:ITuffLa3Tacz68Hg+3xAzFl/kdcS/O5ROocc4DteG8qMrc:ITuffYTL68r3Il/kdcS25aPDX8n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 273KB

file.exe

IMPHASH e21f10fb81de748812499eebaf8a1cc1
SHA256 4e2d2f4dd505737ccf5773dd87004e846925b2c439acfdf4b05287b6cee4df46
MD5 04dab107577f1b6f67e8b02d78cb7148
SHA1 15055cfa17495325d9d7859c27682bffd442714b
SHA512 5abf5e18d33fc2b51b70977d6f99fd7e7a6660a3da7a839e87b676bc563f10c331495c6a90f785373c1fa8c31aa2d007d0d5ceea809620c4f5cab44427a5cfe9
SSDEEP 6144:ITuffLa3Tacz68Hg+3xAzFl/kdcS/O5ROocc4DteG8qMrc:ITuffYTL68r3Il/kdcS25aPDX8n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14742

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeA LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW lstrcpynW CopyFileW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx WriteFile GetLogicalDriveStringsA ResetEvent LocalUnlock LocalReAlloc GlobalFix SetCommState WriteConsoleInputA SetHandleCount FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd SetConsoleMode GetConsoleAliasExesLengthW EnumCalendarInfoW InterlockedDecrement CallNamedPipeW GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing