file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221024-kkac5sffgn
SHA256 65757b57e365632cbb09a09c18fe86a67aa5d53c8fd9da23ee7842d8a46055a8
MD5 988e00b9de7bc68ba25bd87abfc5ee1e
SHA1 9e8d0636f82a04cb3be147fcd4cbb2b135e7ffe1
SHA512 dd34e8e544f985505b8b047f453759e368a831ebf25cf07008d8466de174153287c3bc2ae3f6a2a3b2f8c1610176f33c71359c1f22fba3e945703cc05afde259
SSDEEP 6144:v73P/9LU1sRQa338j2WKpmWj7GwWtseqTj:v7fVoEQa33fWCLWwWtW3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 85c2243080c4d639c6b8e81e9e238d45
SHA256 65757b57e365632cbb09a09c18fe86a67aa5d53c8fd9da23ee7842d8a46055a8
MD5 988e00b9de7bc68ba25bd87abfc5ee1e
SHA1 9e8d0636f82a04cb3be147fcd4cbb2b135e7ffe1
SHA512 dd34e8e544f985505b8b047f453759e368a831ebf25cf07008d8466de174153287c3bc2ae3f6a2a3b2f8c1610176f33c71359c1f22fba3e945703cc05afde259
SSDEEP 6144:v73P/9LU1sRQa338j2WKpmWj7GwWtseqTj:v7fVoEQa33fWCLWwWtW3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructW InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing