file[.]exe | Triage™

General

Target
file.exe
Size 247KB
Sample221109-nc52magdc7
SHA256 0571137cedd8eadc77c309ee4e7482fb99b9598e35a3468613b8bbc5c64a9b09
MD5 47288c605b16e987f30c2a3c6641b679
SHA1 2b6cea1a4a2a85e02ae00f0432ad66a45a33730f
SHA512 8daa700df64390d419e581cdeedd7bdcece7e65c6f599f9e376c01984d7c6d5c7e838054eba5bd1d4005f3cf4e2d1ea8909051567bfd0765bfc061b890a7a7eb
SSDEEP 6144:GAFtLzCsMMP58889eARNwYE9H0/mvdElTOO+A:GctCsMw8884H9umFGO7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 247KB

file.exe

IMPHASH c3c124cd627a73ac09806f41441c2c59
SHA256 0571137cedd8eadc77c309ee4e7482fb99b9598e35a3468613b8bbc5c64a9b09
MD5 47288c605b16e987f30c2a3c6641b679
SHA1 2b6cea1a4a2a85e02ae00f0432ad66a45a33730f
SHA512 8daa700df64390d419e581cdeedd7bdcece7e65c6f599f9e376c01984d7c6d5c7e838054eba5bd1d4005f3cf4e2d1ea8909051567bfd0765bfc061b890a7a7eb
SSDEEP 6144:GAFtLzCsMMP58889eARNwYE9H0/mvdElTOO+A:GctCsMw8884H9umFGO7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceA OpenEventA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA VerifyVersionInfoW ReleaseActCtx FindNextVolumeW MoveFileWithProgressW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW SetFileApisToANSI AddAtomA CreateFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing