file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221216-nmp36aef45
SHA256 e8276226bbb4fb085378490e9c34ec4cc50f145b79e3e2d5b63ec35739f43565
MD5 719d732513063d7361c297a317112404
SHA1 9b2d33a360dcd2d04076566686a12a0f38243265
SHA512 1cbc81c2c2995d1545c5805b6d696f694fde5db6d7c233549e66f94a3bc5cbd149985149838c5314ce2f39e247da703ceec08156098f9d1c0c5bb8b6903349ac
SSDEEP 6144:GTf/+LkibfnkvqeTk8nYCiBaoXVYUS1WTkJPaRhYqtV9V10D8qMrc:GTf/+wcfkq78nGcoClmsPehYqtV1A8n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH 875e7ce4bbed8fa04d22755473fc97c9
SHA256 e8276226bbb4fb085378490e9c34ec4cc50f145b79e3e2d5b63ec35739f43565
MD5 719d732513063d7361c297a317112404
SHA1 9b2d33a360dcd2d04076566686a12a0f38243265
SHA512 1cbc81c2c2995d1545c5805b6d696f694fde5db6d7c233549e66f94a3bc5cbd149985149838c5314ce2f39e247da703ceec08156098f9d1c0c5bb8b6903349ac
SSDEEP 6144:GTf/+LkibfnkvqeTk8nYCiBaoXVYUS1WTkJPaRhYqtV9V10D8qMrc:GTf/+wcfkq78nGcoClmsPehYqtV1A8n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeA LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW lstrcpynW CopyFileW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx WriteFile GetLogicalDriveStringsA ResetEvent LocalUnlock LocalReAlloc GlobalFix SetCommState WriteConsoleInputA SetHandleCount FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd SetConsoleMode GetConsoleAliasExesLengthW EnumCalendarInfoW InterlockedDecrement CallNamedPipeW GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte MultiByteToWideChar HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing