file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221223-qectzagd93
SHA256 3fa86958575449d1498e890dbe67f0208eb93051d5172baaa493b51fc0846d60
MD5 3bba7c9a5fbbfbd6032a479f752dc12f
SHA1 5459125274dde9e1ecaa3bf6b89eb0666b4821bc
SHA512 94ec4e5a5afd0c733a5f5c7509b1ff1c6334a0db428f7ca46bc849132dacd56c48375249fb52244e056d486e0d5ede6ce65edd84ed272704b70c332e9978e33f
SSDEEP 3072:6mLkTczPOr1ZcdXGLTgtKA3UO+Vdu+oukzRZ+lLiWBkOuRGK:BLkTzRZ4W383qVEuk1clLipjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH bcbfb27d06dfce296f146c1fb57c8a36
SHA256 3fa86958575449d1498e890dbe67f0208eb93051d5172baaa493b51fc0846d60
MD5 3bba7c9a5fbbfbd6032a479f752dc12f
SHA1 5459125274dde9e1ecaa3bf6b89eb0666b4821bc
SHA512 94ec4e5a5afd0c733a5f5c7509b1ff1c6334a0db428f7ca46bc849132dacd56c48375249fb52244e056d486e0d5ede6ce65edd84ed272704b70c332e9978e33f
SSDEEP 3072:6mLkTczPOr1ZcdXGLTgtKA3UO+Vdu+oukzRZ+lLiWBkOuRGK:BLkTzRZ4W383qVEuk1clLipjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc ReadConsoleInputW SearchPathA GetCommandLineW ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA CallNamedPipeW GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomA CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchange GetTickCount SetLastError lstrcpynA LoadLibraryW HeapAlloc GetStartupInfoW GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeW CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing