file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample230102-qsdcnaee24
SHA256 fe6c262bb626ff7a2360d970aefc69c39d58435b7b8f633a8db710f78d4ff1f5
MD5 b6082ac4c43d96aeb121556989051427
SHA1 2a4e1bcf032a60856ac75bb5cf164f5b4ab337f2
SHA512 1cfdf09f52cf6a365dd5de029cf829892219dcc3bcb08a3005f3277968e79db884a85ba72346c8b31c0200677881d11724f81e84685cd6cdb7b07947d941bb2e
SSDEEP 3072:odkXJu1dMQLFU0YFhQ35IUARwqXm5g063dlAJWVzIdkJ8AEBOW6:xA+QLUSCRwqXm5l4lGWV2AJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 44e2cf537ef064c2de9a4b8099505d12
SHA256 fe6c262bb626ff7a2360d970aefc69c39d58435b7b8f633a8db710f78d4ff1f5
MD5 b6082ac4c43d96aeb121556989051427
SHA1 2a4e1bcf032a60856ac75bb5cf164f5b4ab337f2
SHA512 1cfdf09f52cf6a365dd5de029cf829892219dcc3bcb08a3005f3277968e79db884a85ba72346c8b31c0200677881d11724f81e84685cd6cdb7b07947d941bb2e
SSDEEP 3072:odkXJu1dMQLFU0YFhQ35IUARwqXm5g063dlAJWVzIdkJ8AEBOW6:xA+QLUSCRwqXm5l4lGWV2AJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24026

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleA CreateDirectoryExW ReadConsoleInputA GetTempPathA GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA GetBinaryTypeA SearchPathW AddConsoleAliasW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceW CreateActCtxW CopyFileW FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressW GetTickCount SetLastError GetPrivateProfileStructA VerifyVersionInfoA LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle FlushFileBuffers

gdi32

SetBrushOrgEx

Sharing