file[.]exe | Triage™

General

Target
file.exe
Size 145KB
Sample221006-mkc55shcgm
SHA256 c3288ab71d0fd3f6f58f1170546afd475d0de8cdde2fba8b06db1ada7eb5d1f5
MD5 62742157fee62a67ee78cdd0997619f6
SHA1 d405d18c2ff9210e14a37f97e6ffbd27b77bc2c3
SHA512 f020a3c14355798cb136173eae96a8f8432704eccdc63c8016f2599814fc9086e2b8d82adcd64f27e36e2612353626c2ddf7f81e1fbc030ac5db4760f366d030
SSDEEP 1536:hLVC7Xwmuon9ReTB+43qUEA/jjQqrbmHnuPyhDjTgbACZNs92dZpMYKGk1NBlMjd:hLVCc6UB+KrEAHQNGbvNs9yTKGyGjO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 145KB

file.exe

IMPHASH 72cb5bffe0db29c44185b5a3b8e9a257
SHA256 c3288ab71d0fd3f6f58f1170546afd475d0de8cdde2fba8b06db1ada7eb5d1f5
MD5 62742157fee62a67ee78cdd0997619f6
SHA1 d405d18c2ff9210e14a37f97e6ffbd27b77bc2c3
SHA512 f020a3c14355798cb136173eae96a8f8432704eccdc63c8016f2599814fc9086e2b8d82adcd64f27e36e2612353626c2ddf7f81e1fbc030ac5db4760f366d030
SSDEEP 1536:hLVC7Xwmuon9ReTB+43qUEA/jjQqrbmHnuPyhDjTgbACZNs92dZpMYKGk1NBlMjd:hLVCc6UB+KrEAHQNGbvNs9yTKGyGjO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetOEMCP GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxA FormatMessageW GetModuleHandleA EnterCriticalSection GetStringTypeExW OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing