file[.]exe | Triage™

General

Target
file.exe
Size 447KB
Sample221114-nbehaaba39
SHA256 62c16113136a1e8365118b08d38050dbf6a2dc4b61346449c381952988a91f6a
MD5 7a4aa9a4f1fa19f6884bd0e919197820
SHA1 b188bf80902829b7cb93b2b540bd150178da82e8
SHA512 afd0d3ebe1663940eefc8921352539f0bc14e23d78664490ff25eea159f3d2fafad8f62d6389217e2d201c1908021156419ecf92f4f5a402c1d8f9a34d0f29de
SSDEEP 6144:Axlwp1LoKb2KEdawwM3+lNCOS0IbiOtHuKAb/K7QVZ4XEn2E1aJ:AxlwjMKbucwwMwCJ0IbjOjby7qZGUv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 447KB

file.exe

IMPHASH cfe8f0f8cf89132ff3ef163fb7b43662
SHA256 62c16113136a1e8365118b08d38050dbf6a2dc4b61346449c381952988a91f6a
MD5 7a4aa9a4f1fa19f6884bd0e919197820
SHA1 b188bf80902829b7cb93b2b540bd150178da82e8
SHA512 afd0d3ebe1663940eefc8921352539f0bc14e23d78664490ff25eea159f3d2fafad8f62d6389217e2d201c1908021156419ecf92f4f5a402c1d8f9a34d0f29de
SSDEEP 6144:Axlwp1LoKb2KEdawwM3+lNCOS0IbiOtHuKAb/K7QVZ4XEn2E1aJ:AxlwjMKbucwwMwCJ0IbjOjby7qZGUv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA WaitNamedPipeA CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing