file[.]exe | Triage™

General

Target
file.exe
Size 189KB
Sample221109-shv6tsbddq
SHA256 3aaa083dc3e5de5b01daf63cdd1c2ded4f628789aa3efaa2f0c4d898d8b59a63
MD5 c6516d46548e079be40b9ba30304002f
SHA1 d72dfd3aeccc1920116aa75f90a98fadc4e0af6e
SHA512 1ef16477dd957798410d7518542cb37f717831e8fda723b03d081c279425ec9777939a1913ac508d423adbcc1487588454daf1a01030b938859043ccb153815c
SSDEEP 3072:TJJyX9fM74C1Lm3/Sl1BRqds1lK+Yy9ji2QGcbavSGG:iYLm3/SadElXjYGTv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 189KB

file.exe

IMPHASH 55041289a20b43277c2c76ab57d307b7
SHA256 3aaa083dc3e5de5b01daf63cdd1c2ded4f628789aa3efaa2f0c4d898d8b59a63
MD5 c6516d46548e079be40b9ba30304002f
SHA1 d72dfd3aeccc1920116aa75f90a98fadc4e0af6e
SHA512 1ef16477dd957798410d7518542cb37f717831e8fda723b03d081c279425ec9777939a1913ac508d423adbcc1487588454daf1a01030b938859043ccb153815c
SSDEEP 3072:TJJyX9fM74C1Lm3/Sl1BRqds1lK+Yy9ji2QGcbavSGG:iYLm3/SadElXjYGTv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFlags InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadWritePtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW MoveFileWithProgressW LoadLibraryA LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW SetFileApisToANSI AddAtomA CreateFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing