file[.]exe | Triage™

General

Target
file.exe
Size 339KB
Sample221110-d37b9sgcdk
SHA256 03d475b96b2235ed0055f401766d0586f377e14ada8cf67eda53beaa1dec449b
MD5 4574f7e4c094043ff4b79d3606bbacea
SHA1 57ae096e16930aa95e0f11e0291a0e7efc34b669
SHA512 0d84eb5628a5daef424b0d29ea104e559c5a7820a05925572ef3385d8344206b042b1e51bdf67fcc635644b8b5b3005653989de3544e084294112f32a1c8c2c5
SSDEEP 6144:d8bLZvhO4sOUrpccTWuf93OFZTlAntgdmgmfwEkpM:dU1vhO9Oepc8uT0tAmgCV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 339KB

file.exe

IMPHASH 555a1039e846788e46de9b61bebb85a0
SHA256 03d475b96b2235ed0055f401766d0586f377e14ada8cf67eda53beaa1dec449b
MD5 4574f7e4c094043ff4b79d3606bbacea
SHA1 57ae096e16930aa95e0f11e0291a0e7efc34b669
SHA512 0d84eb5628a5daef424b0d29ea104e559c5a7820a05925572ef3385d8344206b042b1e51bdf67fcc635644b8b5b3005653989de3544e084294112f32a1c8c2c5
SSDEEP 6144:d8bLZvhO4sOUrpccTWuf93OFZTlAntgdmgmfwEkpM:dU1vhO9Oepc8uT0tAmgCV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32374

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI GetTickCount AddAtomW CreateFileA CloseHandle InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing