file[.]exe | Triage™

General

Target
file.exe
Size 252KB
Sample221111-txhdysgh88
SHA256 754c0ab8423aefea2e20f235a2cdf877b7d994dbc0f9212e2cb6d788c7f2a41a
MD5 4b843d7632824c4b271b666323d56cda
SHA1 dab1fbb11d9cce444123799364e5391c937c4e31
SHA512 bab314b3764f9828ee037138db6918769e9cd8785f916cc9acc3f9d5069f23f7373df528e8e1c51485de8d861032d575b0b8994a8431fa619f10c0332894db8f
SSDEEP 6144:ganaD2LYzbU2GYQIiCUOJQy9ISxAlxsVM+0pwj2cPB:gaaD20zbv5AWHxAkVM+wZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 252KB

file.exe

IMPHASH 69b6c5773d82eb11b643349979ba10d8
SHA256 754c0ab8423aefea2e20f235a2cdf877b7d994dbc0f9212e2cb6d788c7f2a41a
MD5 4b843d7632824c4b271b666323d56cda
SHA1 dab1fbb11d9cce444123799364e5391c937c4e31
SHA512 bab314b3764f9828ee037138db6918769e9cd8785f916cc9acc3f9d5069f23f7373df528e8e1c51485de8d861032d575b0b8994a8431fa619f10c0332894db8f
SSDEEP 6144:ganaD2LYzbU2GYQIiCUOJQy9ISxAlxsVM+0pwj2cPB:gaaD20zbv5AWHxAkVM+wZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36406

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA RequestWakeupLatency CallNamedPipeW GetProcAddress LoadLibraryA SetFileTime GetVolumeNameForVolumeMountPointA GetVolumePathNameW FatalAppExitA TerminateThread GetSystemWindowsDirectoryA MoveFileA ResetWriteWatch GetMailslotInfo GetConsoleAliasA SetThreadUILanguage GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo SetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx InitializeCriticalSection FindNextVolumeW InterlockedIncrement LeaveCriticalSection GetComputerNameW MoveFileW SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW GetNamedPipeHandleStateW AreFileApisANSI InterlockedExchange GetModuleHandleA GetTickCount AddAtomW InterlockedDecrement Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoW

Sharing