file[.]exe | Triage™

General

Target
file.exe
Size 226KB
Sample221116-nc5e4aac59
SHA256 c2ae721f4a94d190b2322c193fe0bb1760a4e47dc069a69364b3690c2db973ee
MD5 0cc5ea91c528e9122addaa23afa1a485
SHA1 06e03aed8b72c01112ddf735d8f2fd99a4ec3b20
SHA512 e1ca7f1c67c01ef09885cf1c26abbf8507563a25fd536016e220f3c54a27dfebaf501789c3043b4b8120e58e084bb6bf5db3f363094357b46df63175ed7dfca6
SSDEEP 3072:GXOQy8qMLksTwHanCPjsgwQSwdMxaoISu0RUyuu2I0pz/b:u95jLHwOCPYtwdMiSjUNuq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 226KB

file.exe

IMPHASH 2aeb9a64efb2540095ff8294e9d67f11
SHA256 c2ae721f4a94d190b2322c193fe0bb1760a4e47dc069a69364b3690c2db973ee
MD5 0cc5ea91c528e9122addaa23afa1a485
SHA1 06e03aed8b72c01112ddf735d8f2fd99a4ec3b20
SHA512 e1ca7f1c67c01ef09885cf1c26abbf8507563a25fd536016e220f3c54a27dfebaf501789c3043b4b8120e58e084bb6bf5db3f363094357b46df63175ed7dfca6
SSDEEP 3072:GXOQy8qMLksTwHanCPjsgwQSwdMxaoISu0RUyuu2I0pz/b:u95jLHwOCPYtwdMiSjUNuq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26527

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetStringTypeA GetCommState WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW SetProcessAffinityMask GetLastError GetProcAddress VirtualAlloc CopyFileA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP RaiseException CreateFileA

advapi32

BackupEventLogW

Sharing