file[.]exe | Triage™

General

Target
file.exe
Size 201KB
Sample221112-vyqbmagg95
SHA256 89f9de3672e66eac3a42d25b46689348cdb90011df6fc2e9f26d11e8ffb6d351
MD5 298645e9a912d17e4217c05e1aef8a34
SHA1 7ef70397927b027a6e9db61aedb3bf5f316dc511
SHA512 dcc297992110d76d079e2bfafc978bac24e0a1fa2044a768559965f4cc4335bdf9d24b13e1ddaed7f3331ed0fe1fcefaa90779d5127a8186ddb5aa048d7e5ef6
SSDEEP 3072:UD8X2VM1SRst7L0E6vEP/nRhYzhnQnlCtzQPv7uMROtx9:U0F1SWLh6c3TYxQnlCaSMRex
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH f26be34d80d272fbd2608db39d5c8add
SHA256 89f9de3672e66eac3a42d25b46689348cdb90011df6fc2e9f26d11e8ffb6d351
MD5 298645e9a912d17e4217c05e1aef8a34
SHA1 7ef70397927b027a6e9db61aedb3bf5f316dc511
SHA512 dcc297992110d76d079e2bfafc978bac24e0a1fa2044a768559965f4cc4335bdf9d24b13e1ddaed7f3331ed0fe1fcefaa90779d5127a8186ddb5aa048d7e5ef6
SSDEEP 3072:UD8X2VM1SRst7L0E6vEP/nRhYzhnQnlCtzQPv7uMROtx9:U0F1SWLh6c3TYxQnlCaSMRex
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37702

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileA TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetFirmwareEnvironmentVariableA VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExW DosDateTimeToFileTime VirtualProtect SetFirmwareEnvironmentVariableW CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualAlloc IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW LocalReAlloc FindResourceA SearchPathA RequestWakeupLatency CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoA TerminateThread GetSystemWindowsDirectoryW MoveFileA ResetWriteWatch GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW GetModuleHandleW LeaveCriticalSection GetDevicePowerState InterlockedExchange GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA SetConsoleTitleA EnumCalendarInfoW InterlockedDecrement FindActCtxSectionStringA AreFileApisANSI GetTickCount AddAtomA Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualFree HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer LCMapStringA LCMapStringW CloseHandle FlushFileBuffers ReadFile

user32

GetAltTabInfoW

Sharing