kings[.]exe | Triage™

General

Target
kings.exe
Size 72KB
Sample220126-2aezbabbfq
SHA256 36e4a3de5c4395d295bdf1d70a215d9669b626c58083ec2d8ab29513830faaa6
MD5 5c754da92f7301dc2e44c65df7c2f0ca
SHA1 13fb3bcb9bceb9b8448004b650b37968df84eb70
SHA512 13a2eb67b9e401bf2b61bb0e91fee87cbbf08aa9c05ad58b49914c43ba0c86980a8360bb93ec843ef729a08d74357cd5dcac30ac9d2343b64285d32be9ab23b6
SSDEEP 1536:Ehc9rfc0uXK8aPOysrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG22CZ:drfc0thsrQLOJgY8Zp8LHD4XWaNH71d
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

kings.exe

.exe 72KB

kings.exe

IMPHASH 202fa14f574c71c2f95878e40a79322d
SHA256 36e4a3de5c4395d295bdf1d70a215d9669b626c58083ec2d8ab29513830faaa6
MD5 5c754da92f7301dc2e44c65df7c2f0ca
SHA1 13fb3bcb9bceb9b8448004b650b37968df84eb70
SHA512 13a2eb67b9e401bf2b61bb0e91fee87cbbf08aa9c05ad58b49914c43ba0c86980a8360bb93ec843ef729a08d74357cd5dcac30ac9d2343b64285d32be9ab23b6
SSDEEP 1536:Ehc9rfc0uXK8aPOysrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG22CZ:drfc0thsrQLOJgY8Zp8LHD4XWaNH71d
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenProcess GetTickCount GetModuleHandleA GetProcAddress LoadLibraryA lstrcmpW lstrlenW SetVolumeMountPointW CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateFileW WriteFile InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection lstrlenA GetCommandLineW FindClose FindFirstFileW FindNextFileW GetFileSizeEx GetCurrentProcess ReadFile SetFileAttributesW SetFilePointerEx WaitForSingleObject CreateMutexA WaitForMultipleObjects GetCurrentProcessId ExitProcess CreateThread ExitThread SetProcessShutdownParameters GetSystemInfo lstrcmpiW lstrcpyW lstrcatW OpenMutexA MoveFileExW WideCharToMultiByte HeapAlloc HeapFree GetProcessHeap ReleaseSemaphore CreateSemaphoreA TerminateProcess Sleep GetLastError CloseHandle GetVolumePathNamesForVolumeNameW GetDriveTypeW FindVolumeClose FindNextVolumeW GetLogicalDrives FindFirstVolumeW

user32

wsprintfA

advapi32

QueryServiceStatusEx OpenSCManagerA EnumDependentServicesA ControlService CloseServiceHandle CryptAcquireContextW CryptReleaseContext CryptGenRandom OpenServiceA

shell32

SHEmptyRecycleBinA CommandLineToArgvW ShellExecuteW

netapi32

NetShareEnum NetApiBufferFree

rstrtmgr

RmGetList RmStartSession RmEndSession RmRegisterResources

mpr

WNetCloseEnum WNetEnumResourceW WNetOpenEnumW WNetGetConnectionW

Sharing