file[.]exe | Triage™

General

Target
file.exe
Size 252KB
Sample221115-sshngsee43
SHA256 e9c6fbd1cd2d710a9e872556c9f61695bbdb6e680ac51aaa2125ec8e6dfc548d
MD5 690739c084e59424635d1dac3d29d954
SHA1 7e0452db602718742e80a02fd6fb334dfeaa608c
SHA512 597d658a74f8fb91b78adf359fbfa8290ee4807b1ba9bbabb54b09262fd558fafa1f0cf582b675549e7e59d7d01c858d2e76ab25f4c08565fa6842310fffc0b0
SSDEEP 3072:dy0vfUsJ5VMKG/rY3ISpThvLFK7n2KEyinByG0cOTsIGGaz5znRz:zMOUYvThvL07dEhWlC9n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 252KB

file.exe

IMPHASH 7f647a254c3ca33d9c5fc6f856637f95
SHA256 e9c6fbd1cd2d710a9e872556c9f61695bbdb6e680ac51aaa2125ec8e6dfc548d
MD5 690739c084e59424635d1dac3d29d954
SHA1 7e0452db602718742e80a02fd6fb334dfeaa608c
SHA512 597d658a74f8fb91b78adf359fbfa8290ee4807b1ba9bbabb54b09262fd558fafa1f0cf582b675549e7e59d7d01c858d2e76ab25f4c08565fa6842310fffc0b0
SSDEEP 3072:dy0vfUsJ5VMKG/rY3ISpThvLFK7n2KEyinByG0cOTsIGGaz5znRz:zMOUYvThvL07dEhWlC9n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthA InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount LoadLibraryA GlobalFindAtomA GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing