file[.]exe | Triage™

General

Target
file.exe
Size 315KB
Sample221108-2tc9tscaa8
SHA256 bff4d43943914ef656ba6290a0da1840f7a4c3e45ff726e5a4d360cf2a0ad778
MD5 3d44e0c9c0a15773b11629657e830cad
SHA1 8aa9cce2746b97a28ad66652f29a78f3c1b79246
SHA512 cf6d8b4b5f13eb47f5d529858ba2c120edf0117992f51c721f55bfc31c73848cec1e96ec672316be2e7db06c9030ea0204d69a31afd6b040eabb39a793e475db
SSDEEP 6144:fLaisXhFVzhAi/Ek0hZTSmRwgqylWzcgqp0VzmpmE:fOisXhT58kApkzcghlmpN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 315KB

file.exe

IMPHASH 3587bc86d8ee27a5cdc406b441581e5c
SHA256 bff4d43943914ef656ba6290a0da1840f7a4c3e45ff726e5a4d360cf2a0ad778
MD5 3d44e0c9c0a15773b11629657e830cad
SHA1 8aa9cce2746b97a28ad66652f29a78f3c1b79246
SHA512 cf6d8b4b5f13eb47f5d529858ba2c120edf0117992f51c721f55bfc31c73848cec1e96ec672316be2e7db06c9030ea0204d69a31afd6b040eabb39a793e475db
SSDEEP 6144:fLaisXhFVzhAi/Ek0hZTSmRwgqylWzcgqp0VzmpmE:fOisXhT58kApkzcghlmpN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25606

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW LocalFree FindNextFileW TlsSetValue CopyFileExW MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceW OpenEventA GetThreadPriority CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA ReleaseActCtx FindNextVolumeW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA InitializeCriticalSection GetPrivateProfileStructA InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SetFileTime CreateFileA CloseHandle Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing