file[.]exe | Triage™

General

Target
file.exe
Size 292KB
Sample221104-nnapvsggdk
SHA256 a2e17967ecd903cd84484aa897d4efeaac03246188957210da5b00de8d5a6550
MD5 8c5802d28df242578c2b1bf06fb05816
SHA1 4f851c4b86f65c1198512865742eac529f7c7284
SHA512 b8876170dae8566cbde8b3e49ef5f3360d4f48df17a4175aa0027072a40a8d3269cc463a8c04483971f260197ab6e4b03f7572116e3c19a043992effed1ab086
SSDEEP 3072:LQ0pfcyLaDJNE5ry77THyFU3fvp3a5MCY2QI3fycEvWJgJlP3gD2/gvxs:9plLGN2M7THyG33p3s7EvPjgDhy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 292KB

file.exe

IMPHASH f786c50a05009f33c9b2a14218b2166e
SHA256 a2e17967ecd903cd84484aa897d4efeaac03246188957210da5b00de8d5a6550
MD5 8c5802d28df242578c2b1bf06fb05816
SHA1 4f851c4b86f65c1198512865742eac529f7c7284
SHA512 b8876170dae8566cbde8b3e49ef5f3360d4f48df17a4175aa0027072a40a8d3269cc463a8c04483971f260197ab6e4b03f7572116e3c19a043992effed1ab086
SSDEEP 3072:LQ0pfcyLaDJNE5ry77THyFU3fvp3a5MCY2QI3fycEvWJgJlP3gD2/gvxs:9plLGN2M7THyG33p3s7EvPjgDhy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW CreateMutexW WriteConsoleW ReadFile GetSystemDirectoryA GetVolumePathNameA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW GetFileAttributesA GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing