file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221109-2asv6seder
SHA256 1af5f28400a157a1c799218e3905bfce82e58b80294727b17efea86e742bf7c6
MD5 f26fb59340639c6353c3b7309f86c7a4
SHA1 78734a1351cb9d681222926e5ac52b8e56629341
SHA512 342bf229e7f2929094564f5f16a444f166c13a08c6f0e6f98341ddb6fc3eb4bb62c7015f0470cf62df11ea9ed40fd13bc77335cd43b98b3afe17f38bac0359b3
SSDEEP 6144:0AYlwLdMYKllTemntnhkUVtRhw1ANLj45n60bCJ2G6:0lwpMYnmAE1w1ANqfmJ2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 1420de84cf7777e20fe83536d5c8b6d6
SHA256 1af5f28400a157a1c799218e3905bfce82e58b80294727b17efea86e742bf7c6
MD5 f26fb59340639c6353c3b7309f86c7a4
SHA1 78734a1351cb9d681222926e5ac52b8e56629341
SHA512 342bf229e7f2929094564f5f16a444f166c13a08c6f0e6f98341ddb6fc3eb4bb62c7015f0470cf62df11ea9ed40fd13bc77335cd43b98b3afe17f38bac0359b3
SSDEEP 6144:0AYlwLdMYKllTemntnhkUVtRhw1ANLj45n60bCJ2G6:0lwpMYnmAE1w1ANqfmJ2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32278

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFree InterlockedDecrement GetTickCount GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI AddAtomA CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapReAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing