file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221022-ntewrsdadj
SHA256 408586bd0170c9cd7d49dc9c33586c2d7a7281ffaeb08f630ea4c85974ff42ba
MD5 b00173d174dc612bde530204b7780306
SHA1 b5f5f79bc8169b5008720741b61510c1a850a640
SHA512 a9551ff0322e8f3f7fe18e6ff722ee23572f989a1541662665175124d7c864d09d9bf9b1e3a1e65b2e1ed03373d408ba99444e5b6a517799e9b37a0fd3334d79
SSDEEP 3072:bXVCL9qqTyYxy5WurLv/g+N/L/xLFq15zp6FZRl:zMLZTRx+/zTFE5zp+Z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 620df7f1397c0c9696f14e115c5d0ca6
SHA256 408586bd0170c9cd7d49dc9c33586c2d7a7281ffaeb08f630ea4c85974ff42ba
MD5 b00173d174dc612bde530204b7780306
SHA1 b5f5f79bc8169b5008720741b61510c1a850a640
SHA512 a9551ff0322e8f3f7fe18e6ff722ee23572f989a1541662665175124d7c864d09d9bf9b1e3a1e65b2e1ed03373d408ba99444e5b6a517799e9b37a0fd3334d79
SSDEEP 3072:bXVCL9qqTyYxy5WurLv/g+N/L/xLFq15zp6FZRl:zMLZTRx+/zTFE5zp+Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21201

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing