file[.]exe | Triage™

General

Target
file.exe
Size 472KB
Sample230103-pql2cabd36
SHA256 59a08361252f338660d25945bb2eb7d033b0101e9b0fcf3084445ec248fa038e
MD5 e74805e818d9f4fafbc453209ba9ba2a
SHA1 213c0ca7497ecd614d71ff0e82975da4a470b483
SHA512 e1d8d3d65b7773fa3aa8e42112def17a27f100ef42092171514ca12920ad209ce5bac7e4a8df67939763e89465f15b6693b58a0f977ce7dc7e826f44ca87c5c7
SSDEEP 12288:zDamThn1ZuEldZB50oUblitGa/EQUXTMENi+:SmTh1PZBSRQPEhTtN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 472KB

file.exe

IMPHASH 827b2aefd23a3c76bbfc7b8c8ebe149c
SHA256 59a08361252f338660d25945bb2eb7d033b0101e9b0fcf3084445ec248fa038e
MD5 e74805e818d9f4fafbc453209ba9ba2a
SHA1 213c0ca7497ecd614d71ff0e82975da4a470b483
SHA512 e1d8d3d65b7773fa3aa8e42112def17a27f100ef42092171514ca12920ad209ce5bac7e4a8df67939763e89465f15b6693b58a0f977ce7dc7e826f44ca87c5c7
SSDEEP 12288:zDamThn1ZuEldZB50oUblitGa/EQUXTMENi+:SmTh1PZBSRQPEhTtN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16750

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW TlsSetValue LoadLibraryW GetConsoleAliasW WriteConsoleW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc ResetEvent LoadLibraryA GetProcessWorkingSetSize SetConsoleDisplayMode LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing