file[.]exe | Triage™

General

Target
file.exe
Size 707KB
Sample221109-1lf53sebbm
SHA256 06274ae644ad962ebbab5bb3c52c930e5390b88472e00117ff3abc438c5ea388
MD5 c841edc4a14ff66ab28ab5dfbed65c29
SHA1 d47d453eac33d68f0d67b714ae874857c8794f40
SHA512 e820cf1180e49274e6f52b3191d9a5ca244309da8f4f1b226bdd967ebadcd682e49943dfa9c0b0fed20d8897cff9db7834430a7a1356f683eb3a169480a5156e
SSDEEP 12288:OqgBVDUvIamCDXURRwCS4T4VUJIXpdUq/4IuDqk1HJukF5p2dFuAyrf2uNqRVl:OHDUjelCEcUl0QAyL26I
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 707KB

file.exe

IMPHASH 1420de84cf7777e20fe83536d5c8b6d6
SHA256 06274ae644ad962ebbab5bb3c52c930e5390b88472e00117ff3abc438c5ea388
MD5 c841edc4a14ff66ab28ab5dfbed65c29
SHA1 d47d453eac33d68f0d67b714ae874857c8794f40
SHA512 e820cf1180e49274e6f52b3191d9a5ca244309da8f4f1b226bdd967ebadcd682e49943dfa9c0b0fed20d8897cff9db7834430a7a1356f683eb3a169480a5156e
SSDEEP 12288:OqgBVDUvIamCDXURRwCS4T4VUJIXpdUq/4IuDqk1HJukF5p2dFuAyrf2uNqRVl:OHDUjelCEcUl0QAyL26I
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32294

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFree InterlockedDecrement GetTickCount GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI AddAtomA CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapReAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing