file[.]exe | Triage™

General

Target
file.exe
Size 133KB
Sample221002-nmpsdsefbj
SHA256 0bd5521e13456d00f759491dcd1b6eaceb8024a1ed4afd452df7f883642357fa
MD5 0ad47ea9ecf6e1abd2cb8abc3f4abee8
SHA1 fdfe36ce54baa868626aa95e16fb7bf28049d86a
SHA512 4455c5c5dcaf1797c36ab2c77ff4db6635aaa8a7f0d45e3c43f85a7750860f8a8a2a732607c1df15d5855712d651a7a1a462651d574c663a2d5fb82d4bcc8821
SSDEEP 1536:fucmPR9f01aeGS9SRb3Ktz164AJ7x9F28jowidArNCHe3ADJVonpJCE2RYSZfofV:fuhYSRz8w7x+8j6gU+3ADeCRYgNxS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 133KB

file.exe

IMPHASH 6ea56e66783c97394bc0154746efdf81
SHA256 0bd5521e13456d00f759491dcd1b6eaceb8024a1ed4afd452df7f883642357fa
MD5 0ad47ea9ecf6e1abd2cb8abc3f4abee8
SHA1 fdfe36ce54baa868626aa95e16fb7bf28049d86a
SHA512 4455c5c5dcaf1797c36ab2c77ff4db6635aaa8a7f0d45e3c43f85a7750860f8a8a2a732607c1df15d5855712d651a7a1a462651d574c663a2d5fb82d4bcc8821
SSDEEP 1536:fucmPR9f01aeGS9SRb3Ktz164AJ7x9F28jowidArNCHe3ADJVonpJCE2RYSZfofV:fuhYSRz8w7x+8j6gU+3ADeCRYgNxS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13255

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode MoveFileA DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperA

winhttp

WinHttpQueryOption

Sharing