file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221102-nyfc4accer
SHA256 5f0bb5a18101052210a5f842ef8b5b1e558ae37e2bf130c070d4ad9af3b75475
MD5 1015ac63ec62d1916407babf8e931e0f
SHA1 bed2ff6671aa747120e82757b3deb271aae1fb39
SHA512 59ec564875cde785f3fc9a18906c00eafd511a07cc4680ecc0fc3c0890fac69aaf78e73cb1a578021ef5ff0fb84e00c1b9371e362422083fe306e5cdf08b869f
SSDEEP 3072:nkO8rNheoRbhxUh5MGv59d3rQhzc/ovurVg6avmxEA/No3FXRa+81lQ9E1Vggjcy:V8rNfbLFGJrQF0b1o1XRa+017ITsq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 3d675596ca8e40a75b4d427a316299a8
SHA256 5f0bb5a18101052210a5f842ef8b5b1e558ae37e2bf130c070d4ad9af3b75475
MD5 1015ac63ec62d1916407babf8e931e0f
SHA1 bed2ff6671aa747120e82757b3deb271aae1fb39
SHA512 59ec564875cde785f3fc9a18906c00eafd511a07cc4680ecc0fc3c0890fac69aaf78e73cb1a578021ef5ff0fb84e00c1b9371e362422083fe306e5cdf08b869f
SSDEEP 3072:nkO8rNheoRbhxUh5MGv59d3rQhzc/ovurVg6avmxEA/No3FXRa+81lQ9E1Vggjcy:V8rNfbLFGJrQF0b1o1XRa+017ITsq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17313

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WaitNamedPipeA WriteConsoleInputA GetModuleHandleW GetGeoInfoW GlobalAlloc LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA SetThreadContext GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW AddAtomW CreateEventW OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing