file[.]exe | Triage™

General

Target
file.exe
Size 246KB
Sample221110-bdsfpsfccr
SHA256 44eecbac11b63d119eafb9b4db9647823e455c9513147412f86cd1f257ec471d
MD5 875f6d8beb53522f12355bf937044696
SHA1 1b436c2e1dbe1dee2d1e14465de3b1850636a595
SHA512 e50a003ee3da4ede11e8a2714a7ce0a57fd27d0735988ac9d7aa13c0d95543fce8e170abc3a491efa36b0e8f0300924dd2b5ccc4b6d06f63a69e3d6c476acb5d
SSDEEP 6144:jt1LqkeODES0gsode/AvRaaOL4IKNAW8Iq:jHekeO4Sde/AgaHIKKW0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 246KB

file.exe

IMPHASH 50dfca9a3d771d15114a034ab5a1e43b
SHA256 44eecbac11b63d119eafb9b4db9647823e455c9513147412f86cd1f257ec471d
MD5 875f6d8beb53522f12355bf937044696
SHA1 1b436c2e1dbe1dee2d1e14465de3b1850636a595
SHA512 e50a003ee3da4ede11e8a2714a7ce0a57fd27d0735988ac9d7aa13c0d95543fce8e170abc3a491efa36b0e8f0300924dd2b5ccc4b6d06f63a69e3d6c476acb5d
SSDEEP 6144:jt1LqkeODES0gsode/AvRaaOL4IKNAW8Iq:jHekeO4Sde/AgaHIKKW0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA LocalFree InterlockedDecrement GetTickCount GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI AddAtomW CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing