file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221111-pv7hvafd73
SHA256 197cf74cd5fbc150cc7d98e0e41a3daf2b4bbc473f8d311a304ccf28c9e625c4
MD5 3c55dddf974dd578b3395abb260c7552
SHA1 7722f71667f6ab4f884decdce9f2b07951e454f2
SHA512 37e1b0123a96fb7f6f337ab524a424121d0626ebbe6fd71be8fdd1de247468b4f9ba2a32031e61c1d0852bf0559ce462f17023040befe67e4dae26c65191f056
SSDEEP 6144:y24L9j+GD8ndJEDmxpWtzgABLE5kwrJ4qQhpPhoejhmTcQ:yrBj+GWrCx5Y/rJ44CmT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 83255581520bac60e7aa13415e1c76ea
SHA256 197cf74cd5fbc150cc7d98e0e41a3daf2b4bbc473f8d311a304ccf28c9e625c4
MD5 3c55dddf974dd578b3395abb260c7552
SHA1 7722f71667f6ab4f884decdce9f2b07951e454f2
SHA512 37e1b0123a96fb7f6f337ab524a424121d0626ebbe6fd71be8fdd1de247468b4f9ba2a32031e61c1d0852bf0559ce462f17023040befe67e4dae26c65191f056
SSDEEP 6144:y24L9j+GD8ndJEDmxpWtzgABLE5kwrJ4qQhpPhoejhmTcQ:yrBj+GWrCx5Y/rJ44CmT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32694

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress GetModuleHandleA SetFileTime GetVolumeNameForVolumeMountPointA GetVolumePathNameW FatalAppExitA TerminateThread GetSystemWindowsDirectoryA ResetWriteWatch GetMailslotInfo GetConsoleAliasA SetThreadUILanguage GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx InitializeCriticalSection FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI GetTickCount AddAtomW InterlockedDecrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoW

Sharing