file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221109-ng5awsaadp
SHA256 7e2bc8c43ca1e893b54455243bab4d60f86be905e02323c9b79c49c2ae023fbf
MD5 15a3229f459bd52f50ea195ad010abc6
SHA1 bd3eeaff900b462ade3bf04c93004140dbffed1a
SHA512 86cdfae40e2a0a893d5bdcff6fd18aa0c98c9f4682a1335985af46ed9f3037a7fcec5f2ed319b406634f6641bbc32661b5ad2adc6b56f70e3c4bd188a625edd4
SSDEEP 6144:2afL6e1smJun1u3hFyG8Z9rz5RimUF3v4ew4acdidSkGO:2af11saCuhQG8Z9ZRG5v7w90
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH c3c124cd627a73ac09806f41441c2c59
SHA256 7e2bc8c43ca1e893b54455243bab4d60f86be905e02323c9b79c49c2ae023fbf
MD5 15a3229f459bd52f50ea195ad010abc6
SHA1 bd3eeaff900b462ade3bf04c93004140dbffed1a
SHA512 86cdfae40e2a0a893d5bdcff6fd18aa0c98c9f4682a1335985af46ed9f3037a7fcec5f2ed319b406634f6641bbc32661b5ad2adc6b56f70e3c4bd188a625edd4
SSDEEP 6144:2afL6e1smJun1u3hFyG8Z9rz5RimUF3v4ew4acdidSkGO:2af11saCuhQG8Z9ZRG5v7w90
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceA OpenEventA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA VerifyVersionInfoW ReleaseActCtx FindNextVolumeW MoveFileWithProgressW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW SetFileApisToANSI AddAtomA CreateFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing