file[.]exe | Triage™

General

Target
file.exe
Size 406KB
Sample221010-nmp36abfc7
SHA256 ac862ba3cb5ad90f8e3d37f72e886cdee49c23fedeb61672f772ae101296c112
MD5 3d151da955eb8fb86b751efb63d8942d
SHA1 991a19f943308f112117d8efb64faf923706229e
SHA512 6f607651637f9ca469ec9a2b9aec43351bb5a73973118be3475dfa3e1a09a19d7541521b181286319219d8684ead384d578135d8d1a45a73f7ddfcb992b3ac7d
SSDEEP 6144:zDPRS552xMoVv0gBbS4Y2gxpGdmojI+rwVfquS:zDM552LJGSgx0dq+d
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 406KB

file.exe

IMPHASH 86121436ff5ad4d639bb9d7e4c098681
SHA256 ac862ba3cb5ad90f8e3d37f72e886cdee49c23fedeb61672f772ae101296c112
MD5 3d151da955eb8fb86b751efb63d8942d
SHA1 991a19f943308f112117d8efb64faf923706229e
SHA512 6f607651637f9ca469ec9a2b9aec43351bb5a73973118be3475dfa3e1a09a19d7541521b181286319219d8684ead384d578135d8d1a45a73f7ddfcb992b3ac7d
SSDEEP 6144:zDPRS552xMoVv0gBbS4Y2gxpGdmojI+rwVfquS:zDM552LJGSgx0dq+d
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30432

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile GetConsoleAliasExesLengthA GetConsoleAliasA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA GetTickCount EnumCalendarInfoExW ConvertFiberToThread WaitNamedPipeW EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA SetVolumeMountPointA GetFileAttributesA SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW GetVolumePathNameA WritePrivateProfileStringW GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc DnsHostnameToComputerNameA GetFileType CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersionExA SetFileValidData FindActCtxSectionStringW LCMapStringW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

Sharing