file[.]exe | Triage™

General

Target
file.exe
Size 162KB
Sample221109-e1dgvafddp
SHA256 954a123a16bca97d6d1ef18c75d68a87efcac53ba20f0f1a78f4c65ee6436a6d
MD5 66c7e82e51732d18616f57ef42ab664a
SHA1 65851d9fb3ce2f6d2b690a7a00220644356a9ad5
SHA512 41d13006a606c6c1c89b156e16cb5901b99241174011da70e620d65f6c4b8f7af09402d82574c1841d6af8cd07efb75ea4bad32b621c31fec443b0b22c450e7e
SSDEEP 3072:A7uCiGLEUoBFwnRnzM7cHpNUhjJUMyfHpI:yPZLEUoBFAScpNUaMUp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 162KB

file.exe

IMPHASH 2ec92b41f6c8bdf990d2a407c4ec5d6b
SHA256 954a123a16bca97d6d1ef18c75d68a87efcac53ba20f0f1a78f4c65ee6436a6d
MD5 66c7e82e51732d18616f57ef42ab664a
SHA1 65851d9fb3ce2f6d2b690a7a00220644356a9ad5
SHA512 41d13006a606c6c1c89b156e16cb5901b99241174011da70e620d65f6c4b8f7af09402d82574c1841d6af8cd07efb75ea4bad32b621c31fec443b0b22c450e7e
SSDEEP 3072:A7uCiGLEUoBFwnRnzM7cHpNUhjJUMyfHpI:yPZLEUoBFAScpNUaMUp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25254

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW LocalFree FindNextFileW TlsSetValue CopyFileExW MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceW OpenEventA GetThreadPriority CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA ReleaseActCtx FindNextVolumeW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA InitializeCriticalSection GetPrivateProfileStructA InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SetFileTime CreateFileA CloseHandle Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing