file[.]exe | Triage™

General

Target
file.exe
Size 252KB
Sample221115-tgtr2sef39
SHA256 05bf2f3c0dcde35165f3668d9735a960e3d4297075e8e199b6d5e7fe859104d5
MD5 6b4ea1fe05456da2804c55c00c11c0e6
SHA1 952a33dca0bc4db3cff091e54f2cedb0f4a1ecb6
SHA512 6ea77e5095b498f473138fbfbef08e354289715048e7a6395d13edc73bfd725affd88b96e5145b43c79a82919bda791012a0494dc614dd8ac91411b39f8c365c
SSDEEP 6144:nxoGfnp9LqxLGIduZIIe6jkNi8nV7jQT:xoGf/8dIJe64Ni+5k
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 252KB

file.exe

IMPHASH 7f647a254c3ca33d9c5fc6f856637f95
SHA256 05bf2f3c0dcde35165f3668d9735a960e3d4297075e8e199b6d5e7fe859104d5
MD5 6b4ea1fe05456da2804c55c00c11c0e6
SHA1 952a33dca0bc4db3cff091e54f2cedb0f4a1ecb6
SHA512 6ea77e5095b498f473138fbfbef08e354289715048e7a6395d13edc73bfd725affd88b96e5145b43c79a82919bda791012a0494dc614dd8ac91411b39f8c365c
SSDEEP 6144:nxoGfnp9LqxLGIduZIIe6jkNi8nV7jQT:xoGf/8dIJe64Ni+5k
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthA InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount LoadLibraryA GlobalFindAtomA GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing