file[.]exe | Triage™

General

Target
file.exe
Size 164KB
Sample221117-rkkmfaaf2x
SHA256 fe2f0cae060dbc4ac8e196d7ed712150bd5e184d1e2f1d0efddbdb712ade79bf
MD5 3e64304cfc0e972db5f46cf8c6605e57
SHA1 0299e5ba7e584a3e478ed754ab2548b7700a6f5e
SHA512 9403ba50089aed4934d427652d3dc89a13a08370127d9c8625caf59a4e39dbc58716a8535996a0cccd1d03791954c5b0bb789f4b38ccc9dcd0d985b4dbdf4e8b
SSDEEP 3072:2oKzPquEDaHfc5O1MgMrvUD+ytLBKNXgdaMASG69cXnb9nD:2/D7SaYrv00NhMS694b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 164KB

file.exe

IMPHASH 9884160a03cb40bb136a44e254cf62b9
SHA256 fe2f0cae060dbc4ac8e196d7ed712150bd5e184d1e2f1d0efddbdb712ade79bf
MD5 3e64304cfc0e972db5f46cf8c6605e57
SHA1 0299e5ba7e584a3e478ed754ab2548b7700a6f5e
SHA512 9403ba50089aed4934d427652d3dc89a13a08370127d9c8625caf59a4e39dbc58716a8535996a0cccd1d03791954c5b0bb789f4b38ccc9dcd0d985b4dbdf4e8b
SSDEEP 3072:2oKzPquEDaHfc5O1MgMrvUD+ytLBKNXgdaMASG69cXnb9nD:2/D7SaYrv00NhMS694b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25591

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelW FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressW GetCommandLineA GetVolumeInformationW CancelTimerQueueTimer DeleteTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation GetConsoleTitleW GetPrivateProfileStructW GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStrings GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomW GetTickCount GetLogicalDrives VerifyVersionInfoA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime GetListBoxInfo

gdi32

GetCharWidth32A

Sharing