file[.]exe | Triage™

General

Target
file.exe
Size 346KB
Sample221115-nv55cahe4t
SHA256 0d8addfdfedb5494162021c574e524bb28526d783e6ea7cf238418f2652074b9
MD5 3edfece1c16aaa3048fa0faa6e30b58d
SHA1 a84dcc4f6150c45bcb5f3452f5cb76b144ab131a
SHA512 fb1b3d110e1ed2e0aaa50f2a9ca04def118d4d44b3c4ca2e226241fe5d6d1e181ceea0cb40f7be11d6f5c7cbec586186134b5c9a559f8d5d5da562605637f1ce
SSDEEP 6144:+gbWYhmxJJi4x5444LMGQmXmPMQ6KJakv+dqW/jwUI4LOLz:DbWYhmggQLqmXmPL6MaMPW/EUIae
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 346KB

file.exe

IMPHASH 9b96582b550809a59a2cfe6ee51635e4
SHA256 0d8addfdfedb5494162021c574e524bb28526d783e6ea7cf238418f2652074b9
MD5 3edfece1c16aaa3048fa0faa6e30b58d
SHA1 a84dcc4f6150c45bcb5f3452f5cb76b144ab131a
SHA512 fb1b3d110e1ed2e0aaa50f2a9ca04def118d4d44b3c4ca2e226241fe5d6d1e181ceea0cb40f7be11d6f5c7cbec586186134b5c9a559f8d5d5da562605637f1ce
SSDEEP 6144:+gbWYhmxJJi4x5444LMGQmXmPMQ6KJakv+dqW/jwUI4LOLz:DbWYhmggQLqmXmPL6MaMPW/EUIae
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15079

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA SetDefaultCommConfigW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA GetNamedPipeInfo GetCPInfoExA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressA CancelTimerQueueTimer DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation InterlockedExchangeAdd SetConsoleTitleW GetPrivateProfileStructA InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateThread MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExA GlobalFindAtomA GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing