file[.]exe | Triage™

General

Target
file.exe
Size 193KB
Sample221112-m59pvaeh85
SHA256 8ef2d248e993647977d7df2e2ee642a1874df6b4de6e3550aecc5de6df1a0147
MD5 ff50507cd0c3c73f62b57601bfdada76
SHA1 7870467ab946496358ac047066ea33509d2793b2
SHA512 b36376d5a92227d849ae16e04ef2f55aba0193000661f182e630aa89b66ab6eb9c963cf95e886518f7280dc9efe65f850ecf7c3ed463464fe2ba6bb076406539
SSDEEP 3072:80uX4Ir18c5WtQLaYbLhLD/ER3s0Fwb/pBqe3yR13s7aVg4oCa:8Hl8c7LBLZTDBB1q6uVgzC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 193KB

file.exe

IMPHASH 139629f954697031dcbd93a2036b9fde
SHA256 8ef2d248e993647977d7df2e2ee642a1874df6b4de6e3550aecc5de6df1a0147
MD5 ff50507cd0c3c73f62b57601bfdada76
SHA1 7870467ab946496358ac047066ea33509d2793b2
SHA512 b36376d5a92227d849ae16e04ef2f55aba0193000661f182e630aa89b66ab6eb9c963cf95e886518f7280dc9efe65f850ecf7c3ed463464fe2ba6bb076406539
SSDEEP 3072:80uX4Ir18c5WtQLaYbLhLD/ER3s0Fwb/pBqe3yR13s7aVg4oCa:8Hl8c7LBLZTDBB1q6uVgzC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37670

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileA TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetFirmwareEnvironmentVariableA VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExW DosDateTimeToFileTime VirtualProtect SetFirmwareEnvironmentVariableW CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualAlloc IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW LocalReAlloc FindResourceA SearchPathA RequestWakeupLatency CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoA TerminateThread GetSystemWindowsDirectoryA MoveFileA ResetWriteWatch GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW GetModuleHandleW LeaveCriticalSection GetDevicePowerState InterlockedExchange GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA SetConsoleTitleA EnumCalendarInfoW InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI GetTickCount AddAtomA Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualFree HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer LCMapStringA LCMapStringW CloseHandle FlushFileBuffers ReadFile

user32

GetAltTabInfoW

Sharing