file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221108-xd26sscbe2
SHA256 5718ec5933d04ffb5ee90a25f8ebf22925e046620f3b59bf500f05ccce30853e
MD5 50cc59d056b8cd3d414a622ece28bb35
SHA1 754d702584cbcf4ce16cdf1647295ef1d53483c1
SHA512 f96fdbc3242d8d67c2f56be58224638ddcbbdfb52cbc7ffa513b2fc4e62353b2669c282d9aaa812f0488ad57704e53e9b268aea3d79c6b3864f827f5677c5e3a
SSDEEP 3072:0ZRuwba9XLm1epRb/xTbiAS5kI80meTLASYFNK+pX8Vp8kBNF22VtH+a:0aZLm1ax3iAYkhGcbFN3+5ne
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 9319d135f7d6ec290291daf0b6cad258
SHA256 5718ec5933d04ffb5ee90a25f8ebf22925e046620f3b59bf500f05ccce30853e
MD5 50cc59d056b8cd3d414a622ece28bb35
SHA1 754d702584cbcf4ce16cdf1647295ef1d53483c1
SHA512 f96fdbc3242d8d67c2f56be58224638ddcbbdfb52cbc7ffa513b2fc4e62353b2669c282d9aaa812f0488ad57704e53e9b268aea3d79c6b3864f827f5677c5e3a
SSDEEP 3072:0ZRuwba9XLm1epRb/xTbiAS5kI80meTLASYFNK+pX8Vp8kBNF22VtH+a:0aZLm1ax3iAYkhGcbFN3+5ne
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25686

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW LocalFree FindNextFileW TlsSetValue CopyFileExW MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr GlobalDeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceW GetVolumeInformationA GetThreadPriority CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA ReleaseActCtx FindNextVolumeA LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileW InitializeCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SetFileTime OpenEventA LoadLibraryW CreateFileA Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle

user32

GetAltTabInfoW

advapi32

SetThreadToken

winhttp

WinHttpWriteData

Sharing