file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample221022-nmp36achgr
SHA256 d5cbab8e13cae92e74f05be0bf25f70f4738cbf8a20d21ca23d2c13cc7be4d69
MD5 e168fc5ab0aa5a75233153af41100809
SHA1 f0f4be1f54661fcc9540e6c5a3e7642b18ce2f5f
SHA512 ef6969a8aa78820e8a2be94a7e5911ff664611d246a01bc88616837c02615174ce3b9d8027dd5959e6a265da0f66c82200ba0cddc8631409d171abd8a7657aae
SSDEEP 6144:yM5LF5EJQ3ieUIVw/mcbAM3mjLidck3hxGKP77DpamfpTy:yuJ5d3iUi/mcQPi6EhxGU7x
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH b47acdd06058eb2b40676c02c89210fb
SHA256 d5cbab8e13cae92e74f05be0bf25f70f4738cbf8a20d21ca23d2c13cc7be4d69
MD5 e168fc5ab0aa5a75233153af41100809
SHA1 f0f4be1f54661fcc9540e6c5a3e7642b18ce2f5f
SHA512 ef6969a8aa78820e8a2be94a7e5911ff664611d246a01bc88616837c02615174ce3b9d8027dd5959e6a265da0f66c82200ba0cddc8631409d171abd8a7657aae
SSDEEP 6144:yM5LF5EJQ3ieUIVw/mcbAM3mjLidck3hxGKP77DpamfpTy:yuJ5d3iUi/mcQPi6EhxGU7x
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21265

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID LoadResource VerSetConditionMask GetConsoleAliasA InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing