file[.]exe | Triage™

General

Target
file.exe
Size 184KB
Sample221115-j29c5aca3x
SHA256 b085fa5ac65eb50fd590da2a0a2c38816377e9bac0d443deff89bdc103c90fe1
MD5 3482e8b10fca532fdd2d4017226b6c53
SHA1 15787648e9f76eab92098a36651d339e40b652f0
SHA512 c615fde18d498e5049a3e3ece8a63130fdfd988cedea816879031b609a74dab5bc1840c428426171c4cb5e7aae1af464cc705cc52ca7eab3cca8700c0c65a648
SSDEEP 1536:KgWUBd/IKvOKb9FPEyqe5XmUClUfnm1qo3/9J7wGOx/DFkaVpBVcyH8zlaFxBGNE:KgFVqe5ElUODv7qDL/VzczlkjGpIR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 184KB

file.exe

IMPHASH d24535d6f8c9f542b87ccfe280ca0ce9
SHA256 b085fa5ac65eb50fd590da2a0a2c38816377e9bac0d443deff89bdc103c90fe1
MD5 3482e8b10fca532fdd2d4017226b6c53
SHA1 15787648e9f76eab92098a36651d339e40b652f0
SHA512 c615fde18d498e5049a3e3ece8a63130fdfd988cedea816879031b609a74dab5bc1840c428426171c4cb5e7aae1af464cc705cc52ca7eab3cca8700c0c65a648
SSDEEP 1536:KgWUBd/IKvOKb9FPEyqe5XmUClUfnm1qo3/9J7wGOx/DFkaVpBVcyH8zlaFxBGNE:KgFVqe5ElUODv7qDL/VzczlkjGpIR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15095

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA SetDefaultCommConfigW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA LocalFlags VirtualProtect TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualAlloc CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA GetNamedPipeInfo GetCPInfoExA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressA CancelTimerQueueTimer DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation InterlockedExchangeAdd SetConsoleTitleW GetPrivateProfileStructA InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError SetFileTime GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateThread MoveFileA PeekNamedPipe GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask CreateDirectoryExA GlobalFindAtomW GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing