file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample221018-mkc55sfffj
SHA256 69853b7d9b7c1f8163a82781e33d2724850e83c728f02c8a42bc1bbb2b94bc03
MD5 1283e35540b8411bb070ef4330764806
SHA1 9cafe3976691e4d300bd30c00d3b5140b8be2a83
SHA512 6ac6d9b1e04e34ae6604816339d22ddf253b53bed0f66050d44ab6abe7abb1894e9276472a6385d1456f8407f04e80061a65384f0f9448ef26149ced002be058
SSDEEP 3072:aXNJNLogEJJW5WVv0X7JfjYoaGe/Hf0SgKdZV0KWm3ItB:6zNL+JT0XRY7nHvgKV0jmYt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 1fdc022135d24d585910f65d062a8c26
SHA256 69853b7d9b7c1f8163a82781e33d2724850e83c728f02c8a42bc1bbb2b94bc03
MD5 1283e35540b8411bb070ef4330764806
SHA1 9cafe3976691e4d300bd30c00d3b5140b8be2a83
SHA512 6ac6d9b1e04e34ae6604816339d22ddf253b53bed0f66050d44ab6abe7abb1894e9276472a6385d1456f8407f04e80061a65384f0f9448ef26149ced002be058
SSDEEP 3072:aXNJNLogEJJW5WVv0X7JfjYoaGe/Hf0SgKdZV0KWm3ItB:6zNL+JT0XRY7nHvgKV0jmYt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25023

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW GetConsoleAliasesLengthW InterlockedIncrement VerSetConditionMask GetConsoleAliasA SleepEx GetFileAttributesExA WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW GetBinaryTypeA IsBadWritePtr GetGeoInfoA GetCompressedFileSizeA GetTimeZoneInformation GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc CreateEventW AddAtomA FoldStringA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW SetFileShortNameA ReadConsoleInputW GetVersion EnumResourceLanguagesW SetFileAttributesW LCMapStringW LocalFileTimeToFileTime GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess SetFilePointer WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleOutputCP CloseHandle CreateFileA

user32

ClientToScreen

Sharing