file[.]exe | Triage™

General

Target
file.exe
Size 344KB
Sample221122-natwksbb42
SHA256 707b6abcad4dcd7ec70be02dea64fb17f90065a13126a022e8046c4dd3d0e34c
MD5 75ccd08a0c97ace8136fdb7f8e9595f0
SHA1 0f1a820b10915798e0b4026695fa484f8a44c888
SHA512 d7e313c253d32b660faf718cd61754b6610ec0799313c9b7a04a292cc769510662e01a9783526aec66246cc98bce80df062cf1a0771f716a4a51fa89a08af7c9
SSDEEP 6144:bK3E/11JKDVqjPtkbSZdRc40hc7oZ22tThsIeGjY6x:R/j0mFYSelhMm22ZVEM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 344KB

file.exe

IMPHASH 10a8603fdb3fdbd6953cf884edf79247
SHA256 707b6abcad4dcd7ec70be02dea64fb17f90065a13126a022e8046c4dd3d0e34c
MD5 75ccd08a0c97ace8136fdb7f8e9595f0
SHA1 0f1a820b10915798e0b4026695fa484f8a44c888
SHA512 d7e313c253d32b660faf718cd61754b6610ec0799313c9b7a04a292cc769510662e01a9783526aec66246cc98bce80df062cf1a0771f716a4a51fa89a08af7c9
SSDEEP 6144:bK3E/11JKDVqjPtkbSZdRc40hc7oZ22tThsIeGjY6x:R/j0mFYSelhMm22ZVEM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA GetComputerNameA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing