file[.]exe | Triage™

General

Target
file.exe
Size 222KB
Sample221108-xx7wdsdbf7
SHA256 e443e10d640e7ad4b07219b62b4fed1d78636bb99fa3420fe16ae5aa86d24d79
MD5 50ef89a2cc1fcc2a9c02653ca1731d69
SHA1 cb74e49cb1831dfd02391868cb89457c039532f8
SHA512 10e85891e119bf365b5e64005176da5265e0891af4be7c6ac5657db2c27a0e5fd63a330a312e0dd0202dd8cc68c20d03ee03b2170102dc7ea70259c438b60635
SSDEEP 3072:dfwatKf/L3JTpRw+4XkkcgYCKqqYOj7Vnr8b6xH/kStNZeryzh782cT6YAXdhq:NiL3J40ZneOj5r8biTQrgHBj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH 9319d135f7d6ec290291daf0b6cad258
SHA256 e443e10d640e7ad4b07219b62b4fed1d78636bb99fa3420fe16ae5aa86d24d79
MD5 50ef89a2cc1fcc2a9c02653ca1731d69
SHA1 cb74e49cb1831dfd02391868cb89457c039532f8
SHA512 10e85891e119bf365b5e64005176da5265e0891af4be7c6ac5657db2c27a0e5fd63a330a312e0dd0202dd8cc68c20d03ee03b2170102dc7ea70259c438b60635
SSDEEP 3072:dfwatKf/L3JTpRw+4XkkcgYCKqqYOj7Vnr8b6xH/kStNZeryzh782cT6YAXdhq:NiL3J40ZneOj5r8biTQrgHBj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25686

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW LocalFree FindNextFileW TlsSetValue CopyFileExW MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr GlobalDeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceW GetVolumeInformationA GetThreadPriority CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA ReleaseActCtx FindNextVolumeA LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileW InitializeCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SetFileTime OpenEventA LoadLibraryW CreateFileA Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle

user32

GetAltTabInfoW

advapi32

SetThreadToken

winhttp

WinHttpWriteData

Sharing