file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample220905-nvkteagcdq
SHA256 97b0ffe528664ebc6e549ba84f98f55c7b30d98573af03be0e7c7a35cdedf5bd
MD5 118c8b2817e1809a70e6934f87e963b9
SHA1 2daed9127667084b75fc26d71d1b73c485c9d48a
SHA512 22700f3568f31f51871fdcf5b0e0033eb74ab013da6db15a5480f8044f5e3b94fca9a8098a76c9cd7e47300427d08eb661da55a9b9ac8d7ff9808302cd5ecd2d
SSDEEP 3072:1JQXkLqtNCEoS5LQiqls78J9Xpt9uyt7JccJG5ht5C8SDi2AB4EvDx+:0NAEf5Lvis70Eyt7bUvrd2AOEc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH db1fe82f13f1f0edd6ba4e6134f49ca5
SHA256 97b0ffe528664ebc6e549ba84f98f55c7b30d98573af03be0e7c7a35cdedf5bd
MD5 118c8b2817e1809a70e6934f87e963b9
SHA1 2daed9127667084b75fc26d71d1b73c485c9d48a
SHA512 22700f3568f31f51871fdcf5b0e0033eb74ab013da6db15a5480f8044f5e3b94fca9a8098a76c9cd7e47300427d08eb661da55a9b9ac8d7ff9808302cd5ecd2d
SSDEEP 3072:1JQXkLqtNCEoS5LQiqls78J9Xpt9uyt7JccJG5ht5C8SDi2AB4EvDx+:0NAEf5Lvis70Eyt7bUvrd2AOEc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23793

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW OpenWaitableTimerA WaitNamedPipeA CommConfigDialogW GetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetCPInfoExA EnumResourceTypesA GetModuleFileNameW WriteConsoleOutputCharacterA GetConsoleAliasesLengthA DeleteFileW FillConsoleOutputCharacterW GetProcAddress VirtualAlloc LoadLibraryA ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationW GetModuleHandleA EnumResourceNamesW UnlockFileEx lstrcpynA AddAtomW GenerateConsoleCtrlEvent GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameExW FindNextFileW GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExW SetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA GetStringTypeA FillConsoleOutputCharacterA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW ReadConsoleA GetVolumePathNameA WritePrivateProfileStringW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing