file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221110-a2cjqadde7
SHA256 03dd4dd139c33cce15823c9514e6d090bebd9820505d908f73655a5db3f9b0f6
MD5 73b5a6f8e5eacf1eb90cb0da23eb213b
SHA1 d1fd835503b08441f25926b613c27fd546778156
SHA512 82941fafe03bba6efdb99fd79693503d9b58b9aade2b89e48e3c3085d2d838caab9c0c0a16f06bd5298ea1b39d4d5fdb0fc3a1088cf648758b7d7e5469d7e8a8
SSDEEP 6144:p7dhLPiYsOkECpDJENlLNfstdrko6hsXHEgb4/0BhYIB0:pHjiYsOkbp1ELLNfOdrP6hs0fIYI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 50dfca9a3d771d15114a034ab5a1e43b
SHA256 03dd4dd139c33cce15823c9514e6d090bebd9820505d908f73655a5db3f9b0f6
MD5 73b5a6f8e5eacf1eb90cb0da23eb213b
SHA1 d1fd835503b08441f25926b613c27fd546778156
SHA512 82941fafe03bba6efdb99fd79693503d9b58b9aade2b89e48e3c3085d2d838caab9c0c0a16f06bd5298ea1b39d4d5fdb0fc3a1088cf648758b7d7e5469d7e8a8
SSDEEP 6144:p7dhLPiYsOkECpDJENlLNfstdrko6hsXHEgb4/0BhYIB0:pHjiYsOkbp1ELLNfOdrP6hs0fIYI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32454

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA LocalFree InterlockedDecrement GetTickCount GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI AddAtomW CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing