file[.]exe | Triage™

General

Target
file.exe
Size 344KB
Sample221122-mkenzadf2x
SHA256 b3c88b1cf85a3a871c2e4741f369db82e0dfc172a07023484b0f797dfb6e6d44
MD5 cb0ebed13de635da6d1c836c9e9a92fd
SHA1 18c6ebd19103eef9c10b7210decdcd875ca81494
SHA512 eeb0fb07b5d55c2c7cae239120ca280d1338d3860736479a1b3bdeeefd0104922b79628f2715b5ccd8f4dde8faacfc892ca14919db349771a0d8a6bcbd6d453a
SSDEEP 6144:YK3E/11spgrK+e9qIiwurK18pYjR0cIUWhebwwY22tThsIeGjY6x:a/jI+BIRgejR0hCUJ22ZVEM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 344KB

file.exe

IMPHASH 10a8603fdb3fdbd6953cf884edf79247
SHA256 b3c88b1cf85a3a871c2e4741f369db82e0dfc172a07023484b0f797dfb6e6d44
MD5 cb0ebed13de635da6d1c836c9e9a92fd
SHA1 18c6ebd19103eef9c10b7210decdcd875ca81494
SHA512 eeb0fb07b5d55c2c7cae239120ca280d1338d3860736479a1b3bdeeefd0104922b79628f2715b5ccd8f4dde8faacfc892ca14919db349771a0d8a6bcbd6d453a
SSDEEP 6144:YK3E/11spgrK+e9qIiwurK18pYjR0cIUWhebwwY22tThsIeGjY6x:a/jI+BIRgejR0hCUJ22ZVEM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA GetComputerNameA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing