file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample221112-hfr2aaea93
SHA256 f2df176ce7ca2aacdab518ec011e558d9c6199769a2ba2df5843f174ec677e5d
MD5 1d69a7ed3f6f571ce7a2e98f29bd47fa
SHA1 05718c9406cb7a1c18cc744c193f257cdf0b1337
SHA512 5a911d12721b0e3afc72cad467191aefa9d937ee7f92996c1e6e7c0aaf6f4f8f6f0cc599c9273549c991f3caff42902810a8e117a2df0bcfa07c8886a782d6ca
SSDEEP 3072:fMLXxyrNKbTwdJLtdZIZeRiSEBH2TOY3Ktsnsjge7Zz04j:fCxiKbsLtdZId9ZSOY4ssnx04
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH b3624c9de84346baaf052b30f634ca89
SHA256 f2df176ce7ca2aacdab518ec011e558d9c6199769a2ba2df5843f174ec677e5d
MD5 1d69a7ed3f6f571ce7a2e98f29bd47fa
SHA1 05718c9406cb7a1c18cc744c193f257cdf0b1337
SHA512 5a911d12721b0e3afc72cad467191aefa9d937ee7f92996c1e6e7c0aaf6f4f8f6f0cc599c9273549c991f3caff42902810a8e117a2df0bcfa07c8886a782d6ca
SSDEEP 3072:fMLXxyrNKbTwdJLtdZIZeRiSEBH2TOY3Ktsnsjge7Zz04j:fCxiKbsLtdZId9ZSOY4ssnx04
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37670

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileA TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoW QueryDosDeviceW LocalAlloc DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW CopyFileW OpenWaitableTimerW LocalReAlloc FindResourceA OpenEventA SearchPathA RequestWakeupLatency CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetVolumeNameForVolumeMountPointA GetVolumePathNameW FatalAppExitA TerminateThread GetSystemWindowsDirectoryA MoveFileA ResetWriteWatch GetMailslotInfo GetConsoleAliasA SetThreadUILanguage GetDiskFreeSpaceExA DefineDosDeviceA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd GetCalendarInfoA ZombifyActCtx InitializeCriticalSection FindNextVolumeW InterlockedDecrement GetModuleHandleW LeaveCriticalSection GetComputerNameW MoveFileW SetConsoleTitleA GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW GetNamedPipeHandleStateW AreFileApisANSI InterlockedExchange GetTickCount AddAtomW Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualFree HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer LCMapStringA LCMapStringW CreateFileA CloseHandle FlushFileBuffers ReadFile

user32

GetAltTabInfoW

Sharing