file[.]exe | Triage™

General

Target
file.exe
Size 251KB
Sample221230-qlnj2sff52
SHA256 d4e3caa22fa08c38bb831c7a5e3b3c6a33bd59f570ba7c7bc0e47617dc07bf44
MD5 9b871e5524e2e2ff6792a0c62bc88477
SHA1 7fa6da356234efe5c2f9354b5ec042cd51839b32
SHA512 0fdd9d55f29ef74161fc74bf09a4f1ac6510ccae1f515b368acec6ccc29fa0cce311cda3aa5918c460c41c644dac801f39c45ac329e609fdb8aaa596e3bfa795
SSDEEP 3072:cp3IWCLNf7R/WxC87DxJhiWHpVBPRI7puLU8y5/LU8y5/B6xuqqb53y1teM:9WCLNfo1jZpV6uo5oGx3E5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 251KB

file.exe

IMPHASH a0afb0bb18f93fec919d8262e76eb850
SHA256 d4e3caa22fa08c38bb831c7a5e3b3c6a33bd59f570ba7c7bc0e47617dc07bf44
MD5 9b871e5524e2e2ff6792a0c62bc88477
SHA1 7fa6da356234efe5c2f9354b5ec042cd51839b32
SHA512 0fdd9d55f29ef74161fc74bf09a4f1ac6510ccae1f515b368acec6ccc29fa0cce311cda3aa5918c460c41c644dac801f39c45ac329e609fdb8aaa596e3bfa795
SSDEEP 3072:cp3IWCLNf7R/WxC87DxJhiWHpVBPRI7puLU8y5/LU8y5/B6xuqqb53y1teM:9WCLNfo1jZpV6uo5oGx3E5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25362

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileA FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing