file[.]exe | Triage™

General

Target
file.exe
Size 231KB
Sample221113-bmsstsab37
SHA256 3a118296458148c7aae5f0f8d3bf211fc05cfdce7f910ccce8ca6c317f1c54a8
MD5 bf0e029e262ede1242d006e6b10f2913
SHA1 38abd783fb5d5477aaf69395652fa154832b12b2
SHA512 2d9acbbfdcc875362720121cf7889c7d8219d6d3f072c35f74558545c2ee62f95e0d1847f5a9962233ac7a04a9b0cb31a51d35353bb8d13ba97938fe47f34a1f
SSDEEP 6144:p13LZFgvz3EfvaXq2JtWxovQWXf34zLA:pZ9ur3eaXq2MnWv3i
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 231KB

file.exe

IMPHASH d3e1b79045dd71f903756dd5623adaf6
SHA256 3a118296458148c7aae5f0f8d3bf211fc05cfdce7f910ccce8ca6c317f1c54a8
MD5 bf0e029e262ede1242d006e6b10f2913
SHA1 38abd783fb5d5477aaf69395652fa154832b12b2
SHA512 2d9acbbfdcc875362720121cf7889c7d8219d6d3f072c35f74558545c2ee62f95e0d1847f5a9962233ac7a04a9b0cb31a51d35353bb8d13ba97938fe47f34a1f
SSDEEP 6144:p13LZFgvz3EfvaXq2JtWxovQWXf34zLA:pZ9ur3eaXq2MnWv3i
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28342

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetFirmwareEnvironmentVariableA VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExW LocalFlags VirtualProtect SetFirmwareEnvironmentVariableW CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualAlloc IsBadReadPtr CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW LocalReAlloc FindResourceA SearchPathA RequestWakeupLatency CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoA GetModuleHandleW TerminateThread GetSystemWindowsDirectoryW MoveFileA ResetWriteWatch GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW LeaveCriticalSection GetDevicePowerState InterlockedExchange SetConsoleTitleA GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement FindActCtxSectionStringA GetTickCount SetLastError AddAtomA Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Sharing