file[.]exe | Triage™

General

Target
file.exe
Size 173KB
Sample221113-ppgp8sbb67
SHA256 f53f2cced5df633eb31a2698e952098b2d5dfb0194da3541ddf10a2a0a20e47a
MD5 7acf0e25b5a5719ec2c16c7808ff3ec4
SHA1 2226c4f3be01bfc36b868aa7039c5b7584ed811d
SHA512 e3d3395cd7a66878094b16aba69eaffbe074e8b0302cd3eafa35c767d742f96a4157b5fd45af3cce0e1f86bd2a2065e5e4c59155325dbef4f4380af4ef8b0a85
SSDEEP 3072:MaKpXDCtL23JdS/zRj5XaNNCsZakyulivBkPHzoj68HiLb2:P3L23JdS15Sksvyul8kPzoj6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 173KB

file.exe

IMPHASH 81cb68cc20ee69ac5f93f68a2f825c6d
SHA256 f53f2cced5df633eb31a2698e952098b2d5dfb0194da3541ddf10a2a0a20e47a
MD5 7acf0e25b5a5719ec2c16c7808ff3ec4
SHA1 2226c4f3be01bfc36b868aa7039c5b7584ed811d
SHA512 e3d3395cd7a66878094b16aba69eaffbe074e8b0302cd3eafa35c767d742f96a4157b5fd45af3cce0e1f86bd2a2065e5e4c59155325dbef4f4380af4ef8b0a85
SSDEEP 3072:MaKpXDCtL23JdS/zRj5XaNNCsZakyulivBkPHzoj68HiLb2:P3L23JdS15Sksvyul8kPzoj6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28374

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetFirmwareEnvironmentVariableA VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExW LocalFlags VirtualProtect SetFirmwareEnvironmentVariableW CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualAlloc IsBadReadPtr CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW LocalReAlloc FindResourceA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoA GetModuleHandleW TerminateThread GetSystemWindowsDirectoryW MoveFileA ResetWriteWatch GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW LeaveCriticalSection GetDevicePowerState InterlockedExchange SetConsoleTitleA GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError AddAtomA Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW

Sharing