file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample230115-qsc2wsfc92
SHA256 e62578ec833bafe08c625614886cb1b3fcddb874ce9925727ff14ce704a097d2
MD5 e047c906f72b695587e2b38e35e352c2
SHA1 1b3d1671e751403b64dd35e64fce703400803e6e
SHA512 a94f83fa15e7a582a43aae279b6e951ea5424099349fdf50c98e65e3c6af69e937f9e74630b27740b788cf321d972ab0e82e39913c22db076424bf9fc6749fbf
SSDEEP 6144:H8wV5IyPh8DaZHmHLrr+CajT9hMLtU9Sb5ma7v28oKbWuF+v:H8u+yZnZGHr+Lbe+wn2LKbWu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 915857a0c1b1198d919ed99e3d150aa9
SHA256 e62578ec833bafe08c625614886cb1b3fcddb874ce9925727ff14ce704a097d2
MD5 e047c906f72b695587e2b38e35e352c2
SHA1 1b3d1671e751403b64dd35e64fce703400803e6e
SHA512 a94f83fa15e7a582a43aae279b6e951ea5424099349fdf50c98e65e3c6af69e937f9e74630b27740b788cf321d972ab0e82e39913c22db076424bf9fc6749fbf
SSDEEP 6144:H8wV5IyPh8DaZHmHLrr+CajT9hMLtU9Sb5ma7v28oKbWuF+v:H8u+yZnZGHr+Lbe+wn2LKbWu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24302

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleInputEvents GetStringTypeExW GetConsoleTitleW CreateFileW Module32FirstW GetConsoleAliasW SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage GetHandleInformation FindNextFileA CompareStringA LoadLibraryW CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxA lstrlenA TlsAlloc CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA FindFirstFileW FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA UnhandledExceptionFilter LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetBrushOrgEx

Sharing