file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221109-qtjaashcf3
SHA256 0d14ded1b25ab153c5dcee6db82427a8ec7ad612abd3f2aec00a4122055518ce
MD5 6454b77d6bbb704fb6682c8b4a2989d1
SHA1 141c86b6b97574ceecebfee3290b9167d5f0f6cf
SHA512 3636df5a01e1684c9c15bb7ffd07718ed2f80797ef476267884a1f8d1cd12dc3fc905d1c51f01a6feb599735c2db9426228af5b44267c6478c9a1ececf7776e1
SSDEEP 6144:ZbLi0GKbs/lZdJBUbECqt6uqswolTWPJlAx1zzI8:Zb7GKbalZIuqqlSJloZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 55041289a20b43277c2c76ab57d307b7
SHA256 0d14ded1b25ab153c5dcee6db82427a8ec7ad612abd3f2aec00a4122055518ce
MD5 6454b77d6bbb704fb6682c8b4a2989d1
SHA1 141c86b6b97574ceecebfee3290b9167d5f0f6cf
SHA512 3636df5a01e1684c9c15bb7ffd07718ed2f80797ef476267884a1f8d1cd12dc3fc905d1c51f01a6feb599735c2db9426228af5b44267c6478c9a1ececf7776e1
SSDEEP 6144:ZbLi0GKbs/lZdJBUbECqt6uqswolTWPJlAx1zzI8:Zb7GKbalZIuqqlSJloZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW MoveFileWithProgressW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW SetFileApisToANSI AddAtomA CreateFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing