file[.]exe | Triage™

General

Target
file.exe
Size 279KB
Sample220919-mdm2rscch6
SHA256 fb92589d5288b1a893ba3db3207a3ce2bab559e7b1cbfce7d5797524338e2336
MD5 57b7da4146314ee3851927dd2e4823ca
SHA1 1a6653cdd0a98eb3ec6b1bc38cc57d8f3e9a03ba
SHA512 d00a237e1bb320bb7f98572e7b2f7b32fa9d5630031c7f6543e15c21cc6af5ec198e808520eba864f83834ce49b8d4a8eb72c7064477b353ba50a3a7d6ebda58
SSDEEP 6144:FN2NWkILHM8SnRUfjs1I0EGoj/vigavwVf9:FN2NWP7M8eUkEGo+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 279KB

file.exe

IMPHASH 4d5d415378610a17ab17ccfb334947af
SHA256 fb92589d5288b1a893ba3db3207a3ce2bab559e7b1cbfce7d5797524338e2336
MD5 57b7da4146314ee3851927dd2e4823ca
SHA1 1a6653cdd0a98eb3ec6b1bc38cc57d8f3e9a03ba
SHA512 d00a237e1bb320bb7f98572e7b2f7b32fa9d5630031c7f6543e15c21cc6af5ec198e808520eba864f83834ce49b8d4a8eb72c7064477b353ba50a3a7d6ebda58
SSDEEP 6144:FN2NWkILHM8SnRUfjs1I0EGoj/vigavwVf9:FN2NWP7M8eUkEGo+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38701

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA UnlockFile InterlockedExchangeAdd OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA CommConfigDialogW GetSystemTimeAdjustment FindNextFileA EnumResourceTypesA GetModuleFileNameW UpdateResourceW DeleteFileA CopyFileA VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasW GetShortPathNameA GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameW GetProcAddress ReleaseActCtx FindFirstChangeNotificationA WritePrivateProfileStringA EnumResourceNamesW lstrcpynA AddAtomA AllocConsole GetLongPathNameW GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError GlobalAlloc FindNextFileW OpenJobObjectW EnterCriticalSection FindResourceExW _hwrite GlobalUnfix GetComputerNameW GetVersionExA SetFileShortNameW GetVolumeNameForVolumeMountPointW GetFileSizeEx GetFileAttributesExW SetComputerNameW GetFileAttributesW GetVolumePathNameA FoldStringW CreateFileA CloseHandle HeapAlloc RtlUnwind MultiByteToWideChar RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle HeapSize FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ClientToScreen

msimg32

AlphaBlend

Sharing