file[.]exe | Triage™

General

Target
file.exe
Size 346KB
Sample221115-m5nsdade65
SHA256 8cc7f8c2814caed95fd4dfd859eaa1bcca2771fc7c5111854f20b28de8928a5a
MD5 0e075bcf9cf63d274fadb5b9b4357e5c
SHA1 a6e455f1454bc5f2a2f7c34e6ba0c11f500036cc
SHA512 36f3b2f2847bb22b02609fb320eb61498ffc4a4145a3ea7069d2aba5811355b1b254398168637120a0e7ec25c9f179c43ef1543dd0daec7ac48d8167a65ddee5
SSDEEP 6144:jXvDGOtFGIiY5IvPUIx5b1ZSxvPwfbZHON:j/D7FG2yUMJOvPaY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 346KB

file.exe

IMPHASH 9b96582b550809a59a2cfe6ee51635e4
SHA256 8cc7f8c2814caed95fd4dfd859eaa1bcca2771fc7c5111854f20b28de8928a5a
MD5 0e075bcf9cf63d274fadb5b9b4357e5c
SHA1 a6e455f1454bc5f2a2f7c34e6ba0c11f500036cc
SHA512 36f3b2f2847bb22b02609fb320eb61498ffc4a4145a3ea7069d2aba5811355b1b254398168637120a0e7ec25c9f179c43ef1543dd0daec7ac48d8167a65ddee5
SSDEEP 6144:jXvDGOtFGIiY5IvPUIx5b1ZSxvPwfbZHON:j/D7FG2yUMJOvPaY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15079

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA SetDefaultCommConfigW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA GetNamedPipeInfo GetCPInfoExA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressA CancelTimerQueueTimer DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation InterlockedExchangeAdd SetConsoleTitleW GetPrivateProfileStructA InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateThread MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExA GlobalFindAtomA GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing