file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample221106-mkc55sffd6
SHA256 f86d4402d001f18c9ceb0bdea2fbfa50e4162dee8778ef41c6ad9d6046780775
MD5 913a7259cfb60933171036d6de2f0ca5
SHA1 63a2fe5e1c7e19fadb2eeb37eb0de59d23924c1f
SHA512 5ed7dea304734ba2319150f4f1024777d974db634c6932e5eb0596c1dcdc9e718f7fdc307ab09f2d23b672c447d0af0407a53a34efdeee875639429a716ecc2d
SSDEEP 3072:T15wJiYoNSD+T5b3Jj80535WuErb60KtDqrSOQhsG8ArvXR1eMSQBb:wi1SatC85WuoZKturSTJdrf9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH 2007e819030a9c2e7f4859f5119bc3fd
SHA256 f86d4402d001f18c9ceb0bdea2fbfa50e4162dee8778ef41c6ad9d6046780775
MD5 913a7259cfb60933171036d6de2f0ca5
SHA1 63a2fe5e1c7e19fadb2eeb37eb0de59d23924c1f
SHA512 5ed7dea304734ba2319150f4f1024777d974db634c6932e5eb0596c1dcdc9e718f7fdc307ab09f2d23b672c447d0af0407a53a34efdeee875639429a716ecc2d
SSDEEP 3072:T15wJiYoNSD+T5b3Jj80535WuErb60KtDqrSOQhsG8ArvXR1eMSQBb:wi1SatC85WuoZKturSTJdrf9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20030

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA OpenJobObjectA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW CreateMutexW GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW LCMapStringA GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer CloseHandle RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing