file[.]exe | Triage™

General

Target
file.exe
Size 369KB
Sample221118-nxaffsdb7x
SHA256 649cc3d4bcfdb730af3e2aec5924d259acfed355caf786d032c0f7acf05a0259
MD5 b8f6caf0c7d0357e2637e273e08eb071
SHA1 b588117f0fdedf266c700b38c895f0c4d5555580
SHA512 a0c1048360d010bf4411f8f33ada3b000160df7b11ac07608949186fe4a1141784ea64d2cfda2cb11aa90e4eae366848b461d04745f35c4fe2c41befdbce2c5a
SSDEEP 6144:MIHTlFTUErKWaKtfQLnHW/mSxk8sT2hO7nZpzxeREk7W148zZ+hp0fBa1Ew:rl/XaKtIzqmSxk5T0ObZmVXhp0fQ1Ew
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 369KB

file.exe

IMPHASH f52cbe7913cb9e16dab57cdd5550e4e3
SHA256 649cc3d4bcfdb730af3e2aec5924d259acfed355caf786d032c0f7acf05a0259
MD5 b8f6caf0c7d0357e2637e273e08eb071
SHA1 b588117f0fdedf266c700b38c895f0c4d5555580
SHA512 a0c1048360d010bf4411f8f33ada3b000160df7b11ac07608949186fe4a1141784ea64d2cfda2cb11aa90e4eae366848b461d04745f35c4fe2c41befdbce2c5a
SSDEEP 6144:MIHTlFTUErKWaKtfQLnHW/mSxk8sT2hO7nZpzxeREk7W148zZ+hp0fBa1Ew:rl/XaKtIzqmSxk5T0ObZmVXhp0fQ1Ew
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19308

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA WaitNamedPipeA CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasesA SetCommState GetVolumePathNameW GetPrivateProfileIntA SetFileShortNameW LoadLibraryW CopyFileW GetFileAttributesA GetComputerNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA GetProcessAffinityMask FindNextFileW GetFileAttributesExW GetVolumeNameForVolumeMountPointW AddConsoleAliasA WriteConsoleW GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc GetConsoleCP GetConsoleMode CreateFileA SetStdHandle MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing