file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample221113-halx3sdg5v
SHA256 2c8b48592f8c31d2cd0294d399f5c3fcc2b9540c9aa310dbc8aaddd6a5456c9d
MD5 a2dabba22902cfd175114a878b63847a
SHA1 6b5398184633460da5e80f816b873bd2fce29e42
SHA512 08c0ca27640a5652786006b20849fdc0e76f545da7b5ed7ba52e8af07bee36cea10415cac3ce60f7397ec77dc12b048687fa6b2ac82d2221a79440df86ff0a30
SSDEEP 6144:1cMLHMtZq1cCd3WFeXOG5TUWD+xeGBdNfJ:1cMTkM1cuWFeXV5YG+oG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH bac2f6ca868f531d0ec2f058ef846d15
SHA256 2c8b48592f8c31d2cd0294d399f5c3fcc2b9540c9aa310dbc8aaddd6a5456c9d
MD5 a2dabba22902cfd175114a878b63847a
SHA1 6b5398184633460da5e80f816b873bd2fce29e42
SHA512 08c0ca27640a5652786006b20849fdc0e76f545da7b5ed7ba52e8af07bee36cea10415cac3ce60f7397ec77dc12b048687fa6b2ac82d2221a79440df86ff0a30
SSDEEP 6144:1cMLHMtZq1cCd3WFeXOG5TUWD+xeGBdNfJ:1cMTkM1cuWFeXV5YG+oG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28198

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetFirmwareEnvironmentVariableA VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExW LocalFlags VirtualProtect SetFirmwareEnvironmentVariableW CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualAlloc IsBadReadPtr CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW LocalReAlloc FindResourceA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoA GetModuleHandleW TerminateThread GetSystemWindowsDirectoryW MoveFileA ResetWriteWatch GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW LeaveCriticalSection GetDevicePowerState InterlockedExchange SetConsoleTitleA GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement FindActCtxSectionStringA GetTickCount SetLastError AddAtomA Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Sharing