file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample221018-nhpltsfhap
SHA256 bf79ade3ce58f92dcf83e07cec60e860a670d1a2b08cb641b0e7caf7879e36f2
MD5 46f0288f45c5bf7ded4054035866cc58
SHA1 4663cad95b2ceb7bce91cf1964f9b5001abebda3
SHA512 59b34ac9ec0a1a910cca3764355121b1ffdcfdd0e9b81213a4c74a38946fcbe22a23746c07cb62ec5e4806f170e65314655edc9dbaec4439ff854eace2db2615
SSDEEP 3072:8Xd0BLolbhW5ypcb6HDckBBDrMagNxy2fV0KIo/pCob8B:4OBLAh2b6HDc4BDrBiJ0WpCow
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 1fdc022135d24d585910f65d062a8c26
SHA256 bf79ade3ce58f92dcf83e07cec60e860a670d1a2b08cb641b0e7caf7879e36f2
MD5 46f0288f45c5bf7ded4054035866cc58
SHA1 4663cad95b2ceb7bce91cf1964f9b5001abebda3
SHA512 59b34ac9ec0a1a910cca3764355121b1ffdcfdd0e9b81213a4c74a38946fcbe22a23746c07cb62ec5e4806f170e65314655edc9dbaec4439ff854eace2db2615
SSDEEP 3072:8Xd0BLolbhW5ypcb6HDckBBDrMagNxy2fV0KIo/pCob8B:4OBLAh2b6HDc4BDrBiJ0WpCow
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25023

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW GetConsoleAliasesLengthW InterlockedIncrement VerSetConditionMask GetConsoleAliasA SleepEx GetFileAttributesExA WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW GetBinaryTypeA IsBadWritePtr GetGeoInfoA GetCompressedFileSizeA GetTimeZoneInformation GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc CreateEventW AddAtomA FoldStringA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW SetFileShortNameA ReadConsoleInputW GetVersion EnumResourceLanguagesW SetFileAttributesW LCMapStringW LocalFileTimeToFileTime GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess SetFilePointer WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleOutputCP CloseHandle CreateFileA

user32

ClientToScreen

Sharing