file[.]exe | Triage™

General

Target
file.exe
Size 310KB
Sample221114-nxaq8abb45
SHA256 8d7aeb4705e4023a36809c207ea8bcbb4526f06ea64585cd97a8bc49254ac108
MD5 1cd18a224b7ca9f47cb6199515ebd396
SHA1 a2502c2ba1c3cfb06e94ba7dfe5dd412daeec3c7
SHA512 d88980a25170fba5b53146fe5fd12b5fee73ff599d0fc848d08f41a6b951f7c1ed62c658735d89494febd5b210825e544d264120ae3c9397358e58407024b7ab
SSDEEP 3072:FXOvTeMxLP/lOtu6O4PzrBk8lx4G3SwJLrnwTYsE7jH27EhCoG7ViUWg+3Zo1hJ:BGVxLnlOtKUBf7oiLqrGr27En2E1aJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 310KB

file.exe

IMPHASH ebaad601a7773fbe0f6abffdd9c9ca4d
SHA256 8d7aeb4705e4023a36809c207ea8bcbb4526f06ea64585cd97a8bc49254ac108
MD5 1cd18a224b7ca9f47cb6199515ebd396
SHA1 a2502c2ba1c3cfb06e94ba7dfe5dd412daeec3c7
SHA512 d88980a25170fba5b53146fe5fd12b5fee73ff599d0fc848d08f41a6b951f7c1ed62c658735d89494febd5b210825e544d264120ae3c9397358e58407024b7ab
SSDEEP 3072:FXOvTeMxLP/lOtu6O4PzrBk8lx4G3SwJLrnwTYsE7jH27EhCoG7ViUWg+3Zo1hJ:BGVxLnlOtKUBf7oiLqrGr27En2E1aJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA WaitNamedPipeA CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP WriteConsoleW

Sharing