file[.]exe | Triage™

General

Target
file.exe
Size 247KB
Sample221110-av65rafbal
SHA256 334098ff30d1c292da0dff623c7cfc3cab7c829ad696fce611c364c452b86c29
MD5 42eaba1a29eb3843d8b232ad587ef804
SHA1 399876183d451a83719b39b15a66dfbf4ae29e3c
SHA512 1f82df2248421b968e8cdb9c337d83f475924763dd4400f3850934cdc9b9c7b26d60d1fc241590857726fa3674ebe7a19583739c1923ec5c46a741ae9f6b18ea
SSDEEP 3072:DlX4dhhYpuLmP5WOuxfRX6WdWyos2hV6LRFN2QSGlK3dAkhzjkWcvQgGsa7AXqm2:FCzLa5WOuDBdWy6V8cK6k5Gsa8XUucd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 247KB

file.exe

IMPHASH 50dfca9a3d771d15114a034ab5a1e43b
SHA256 334098ff30d1c292da0dff623c7cfc3cab7c829ad696fce611c364c452b86c29
MD5 42eaba1a29eb3843d8b232ad587ef804
SHA1 399876183d451a83719b39b15a66dfbf4ae29e3c
SHA512 1f82df2248421b968e8cdb9c337d83f475924763dd4400f3850934cdc9b9c7b26d60d1fc241590857726fa3674ebe7a19583739c1923ec5c46a741ae9f6b18ea
SSDEEP 3072:DlX4dhhYpuLmP5WOuxfRX6WdWyos2hV6LRFN2QSGlK3dAkhzjkWcvQgGsa7AXqm2:FCzLa5WOuDBdWy6V8cK6k5Gsa8XUucd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32454

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA LocalFree InterlockedDecrement GetTickCount GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI AddAtomW CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing