file[.]exe | Triage™

General

Target
file.exe
Size 388KB
Sample221202-mkzzxace4s
SHA256 7490bee314c475ec7e9b8ff72e4d429c709ee4a9c644221486de5cce4fd85561
MD5 0a9a1583f724b32152ad5ec83fe05e81
SHA1 856c3f88d320c7167dbdbae7e3001eede868aad9
SHA512 723901aae2749094964105a9c98b4faa07ec5f9fc59d9082e21e10a0e519e79becbc829b31191b9a5fcfdeeba4421f5bc2f4da4d6bb05d2967cb63434f131562
SSDEEP 6144:tqeHLoEYrIDOUB+DVB8YenNPvRPTsX9Z9HWdPa4ckjguRjMgU:t3UEYEWVyY+lsX9ZJgPnxjtRQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 388KB

file.exe

IMPHASH fb0f6dff8eaf4e460b845b9b4576f572
SHA256 7490bee314c475ec7e9b8ff72e4d429c709ee4a9c644221486de5cce4fd85561
MD5 0a9a1583f724b32152ad5ec83fe05e81
SHA1 856c3f88d320c7167dbdbae7e3001eede868aad9
SHA512 723901aae2749094964105a9c98b4faa07ec5f9fc59d9082e21e10a0e519e79becbc829b31191b9a5fcfdeeba4421f5bc2f4da4d6bb05d2967cb63434f131562
SSDEEP 6144:tqeHLoEYrIDOUB+DVB8YenNPvRPTsX9Z9HWdPa4ckjguRjMgU:t3UEYEWVyY+lsX9ZJgPnxjtRQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24047

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetProfileIntA GetVolumeNameForVolumeMountPointA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing