file[.]exe | Triage™

General

Target
file.exe
Size 154KB
Sample221113-25nvpsdf46
SHA256 859db3c6bd0a7606f70fdfbc3fac7c7a6bbdc8cfed3de3db9476d5c8e462eaf5
MD5 559da814e4ed045255cb44611490f1ad
SHA1 de7f9aee9f2e73270650076f9d2794a45b841ed1
SHA512 d2cda3733175985ea1dd0092b77f947360cdf01abf582381d33adb112a4f2958b9a2c10355a97f3c0c362d3a4c533538cdf99f70bf5334e0c4a6b835f044d09d
SSDEEP 3072:bYbmLFcCJ6q58QcV2J9Vi6KPwpTMtUwvJrJ:FLFcCJa7UliPwpwe25
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 154KB

file.exe

IMPHASH a440817def5ad90ddbb1e113ccfc7371
SHA256 859db3c6bd0a7606f70fdfbc3fac7c7a6bbdc8cfed3de3db9476d5c8e462eaf5
MD5 559da814e4ed045255cb44611490f1ad
SHA1 de7f9aee9f2e73270650076f9d2794a45b841ed1
SHA512 d2cda3733175985ea1dd0092b77f947360cdf01abf582381d33adb112a4f2958b9a2c10355a97f3c0c362d3a4c533538cdf99f70bf5334e0c4a6b835f044d09d
SSDEEP 3072:bYbmLFcCJ6q58QcV2J9Vi6KPwpTMtUwvJrJ:FLFcCJa7UliPwpwe25
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14294

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA SetDefaultCommConfigW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA LocalFlags VirtualProtect TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualAlloc IsBadReadPtr CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA GetNamedPipeInfo GetCPInfoExA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateThread MoveFileA PeekNamedPipe GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask CreateDirectoryExA GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW GetModuleHandleW GetACP HeapQueryInformation InterlockedExchangeAdd SetConsoleTitleW GetPrivateProfileStructA InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing