file[.]exe | Triage™

General

Target
file.exe
Size 243KB
Sample221025-nb1eraced2
SHA256 e0b18c82ad2cc520bb3885c8eb6fbe6c0405b3dafdb79a1175659e4853b9f786
MD5 cc72dc6505e4119ed781500527130b2d
SHA1 168bedd85767f3b46c7da59af9adda953eaf453d
SHA512 e47cfce3b590df9183e6e5d7b80cc45297ae2b99ce9a38049af9a83f1dc1ef9cebcb2b165b6e443affe2652a4a583a4769ce89072310ff80da4513d28b9986e8
SSDEEP 3072:6XrzOp+LIgk+eVidX5OuezYYQ/Y+8menQd/Mg/VXro0Xkq29R8sBx9OXHB:a2p+LkVieueUdVQuJ98vSB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 243KB

file.exe

IMPHASH d469ca1d6e996368501cdcdaad61b8dc
SHA256 e0b18c82ad2cc520bb3885c8eb6fbe6c0405b3dafdb79a1175659e4853b9f786
MD5 cc72dc6505e4119ed781500527130b2d
SHA1 168bedd85767f3b46c7da59af9adda953eaf453d
SHA512 e47cfce3b590df9183e6e5d7b80cc45297ae2b99ce9a38049af9a83f1dc1ef9cebcb2b165b6e443affe2652a4a583a4769ce89072310ff80da4513d28b9986e8
SSDEEP 3072:6XrzOp+LIgk+eVidX5OuezYYQ/Y+8menQd/Mg/VXro0Xkq29R8sBx9OXHB:a2p+LkVieueUdVQuJ98vSB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27519

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GetConsoleAliasExesW GlobalAlloc GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA LocalAlloc AddAtomA FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle GetCPInfo GetACP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize

Sharing