file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221109-pc6htsacfp
SHA256 c1e9bbb7aa256fc0670189f4aa4f036651f85470ebd7859618aecee0fa5485b4
MD5 8c3c67eceb9aa6184395a9bc906218db
SHA1 987fa8c4866917e9abbce4f79816708d53438f4d
SHA512 3d7408d614fc8fa10ad2abf949b078a78a4a3243698d27588fcfe73930c7c3c2ed193074d9c10d4fefbcdd8367e9ee3ac22f21d3c559cac80810e0e1a131cfec
SSDEEP 6144:tgXL0OTsdzp1wxYVDaIcVgJ+lxsi/rS9U/A+Ze/bmJAP0L1WbljAM4D:tgXzTsN3w+VFUsqx1vA+ZQCKPId5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH c3c124cd627a73ac09806f41441c2c59
SHA256 c1e9bbb7aa256fc0670189f4aa4f036651f85470ebd7859618aecee0fa5485b4
MD5 8c3c67eceb9aa6184395a9bc906218db
SHA1 987fa8c4866917e9abbce4f79816708d53438f4d
SHA512 3d7408d614fc8fa10ad2abf949b078a78a4a3243698d27588fcfe73930c7c3c2ed193074d9c10d4fefbcdd8367e9ee3ac22f21d3c559cac80810e0e1a131cfec
SSDEEP 6144:tgXL0OTsdzp1wxYVDaIcVgJ+lxsi/rS9U/A+Ze/bmJAP0L1WbljAM4D:tgXzTsN3w+VFUsqx1vA+ZQCKPId5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileA CancelWaitableTimer LocalAlloc FindResourceA OpenEventA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA VerifyVersionInfoW ReleaseActCtx FindNextVolumeW MoveFileWithProgressW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW SetFileApisToANSI AddAtomA CreateFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing