file[.]exe | Triage™

General

Target
file.exe
Size 417KB
Sample221206-nmpsdsgd71
SHA256 93d75a5b47ace1d0de76b97b3d9d5ddcafa33261dd9815465c201f66c85e9d0e
MD5 a7e4d5976bd47a5de4826c961d181fa2
SHA1 388f68f1576e3fd189385308152acb28ed33cfc5
SHA512 894d3e6edeae337eb20e659548168bf2b0c7f7c6f47a0dcb1306a5fa4126375baabde1f1c02e942314fa73e90c5e9e789c19651d8ab20e05b75c4f3e0debd782
SSDEEP 6144:Km6ytbL5qwBdbd1NZ9aqBgQqXUUlUyigiEmL3PMk:KdyhdqwBd/uXUpyzi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 417KB

file.exe

IMPHASH 5a897f6ab7bb8de4ca18be355d40a786
SHA256 93d75a5b47ace1d0de76b97b3d9d5ddcafa33261dd9815465c201f66c85e9d0e
MD5 a7e4d5976bd47a5de4826c961d181fa2
SHA1 388f68f1576e3fd189385308152acb28ed33cfc5
SHA512 894d3e6edeae337eb20e659548168bf2b0c7f7c6f47a0dcb1306a5fa4126375baabde1f1c02e942314fa73e90c5e9e789c19651d8ab20e05b75c4f3e0debd782
SSDEEP 6144:Km6ytbL5qwBdbd1NZ9aqBgQqXUUlUyigiEmL3PMk:KdyhdqwBd/uXUpyzi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30232

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA SetCriticalSectionSpinCount GetStringTypeA GetCPInfo CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetFileType FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing