file[.]exe | Triage™

General

Target
file.exe
Size 189KB
Sample221109-2mnf8acgd2
SHA256 28bbd3dae95a79a6bb45f40d0585c1f3a776fcc991bd6fb8f20e3da5b9646801
MD5 79ae7727211b014ce85b0b94b9254eeb
SHA1 ceb87fcd7fde4fe4c3ca6985e3f5eb31be525fe7
SHA512 9b46e8ddc449c752056194472a4c1e93e4d61ac2a29488913f15b9a655e6cf08fd167453ef3fa81e65590d9fb3bfefc6abb7862efce8e8e79170afea25ca3bd4
SSDEEP 3072:XdX1G5nA/a3oLL6zbVxAPhRkA3RFDMOnl0u634pMC1VHrbQ3QqoxqtB:p0xsUoLenVxAn7MOnKukQ1lcvRt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 189KB

file.exe

IMPHASH 1420de84cf7777e20fe83536d5c8b6d6
SHA256 28bbd3dae95a79a6bb45f40d0585c1f3a776fcc991bd6fb8f20e3da5b9646801
MD5 79ae7727211b014ce85b0b94b9254eeb
SHA1 ceb87fcd7fde4fe4c3ca6985e3f5eb31be525fe7
SHA512 9b46e8ddc449c752056194472a4c1e93e4d61ac2a29488913f15b9a655e6cf08fd167453ef3fa81e65590d9fb3bfefc6abb7862efce8e8e79170afea25ca3bd4
SSDEEP 3072:XdX1G5nA/a3oLL6zbVxAPhRkA3RFDMOnl0u634pMC1VHrbQ3QqoxqtB:p0xsUoLenVxAn7MOnKukQ1lcvRt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32294

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFree InterlockedDecrement GetTickCount GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI AddAtomA CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapReAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing