file[.]exe | Triage™

General

Target
file.exe
Size 498KB
Sample230104-qsdcnagb97
SHA256 b138115dee877cf4029ba6a224bc2ed3daeaa6d31b2f9a6bce98ecb49cbf5217
MD5 1ab5632932261c74b15c71289c102e0f
SHA1 08894eee7d0d10042d205bb6b1c408e70613107b
SHA512 2cac873e6d4ee028027d91c6d858a68e69ac591a88bfda31e45d40f6529ed0bfefdaeca7a348127de5549d644d4168922ea23213205a38fa1511b8fa0bc1351e
SSDEEP 6144:x6LSCuVTM6RzEOlVnveh0laJUbpCJcaoxupmLmc4jT:x6puWeEOlVnDlIcaoxupmLmc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 498KB

file.exe

IMPHASH 9ec1d77cd847f96c59fd98d884b6c73b
SHA256 b138115dee877cf4029ba6a224bc2ed3daeaa6d31b2f9a6bce98ecb49cbf5217
MD5 1ab5632932261c74b15c71289c102e0f
SHA1 08894eee7d0d10042d205bb6b1c408e70613107b
SHA512 2cac873e6d4ee028027d91c6d858a68e69ac591a88bfda31e45d40f6529ed0bfefdaeca7a348127de5549d644d4168922ea23213205a38fa1511b8fa0bc1351e
SSDEEP 6144:x6LSCuVTM6RzEOlVnveh0laJUbpCJcaoxupmLmc4jT:x6puWeEOlVnDlIcaoxupmLmc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount ReadConsoleW GetVolumePathNameW LoadLibraryW GetConsoleAliasW GetFileAttributesW MulDiv WriteConsoleW GetEnvironmentVariableA InterlockedExchange ReleaseActCtx GetCPInfoExW SetLastError GetProcAddress VirtualAlloc GetSystemWindowsDirectoryW LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA OpenFileMappingW VirtualProtect GetFileAttributesExW WaitForDebugEvent GetCurrentThreadId EndUpdateResourceA FindActCtxSectionStringW GetConsoleSelectionInfo LCMapStringW DeleteVolumeMountPointA GlobalAddAtomA TlsGetValue FindFirstChangeNotificationW SetCriticalSectionSpinCount ResetEvent GetComputerNameA MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenUntrusted BackupEventLogA RegQueryInfoKeyA CloseEventLog

Sharing