file[.]exe | Triage™

General

Target
file.exe
Size 227KB
Sample221216-mkc55see79
SHA256 e62669a342d6ff770736296f60ca03957ce4dcf63aa1b98829e9f62b21b22842
MD5 546f5c81ab3a6e689a400b4e8042da41
SHA1 09a7be32eef0272ac9e40bae7452603ed7e75022
SHA512 dd717877cf26c4be7b1eb3f1cb90d600f23942c6a418a2775828e6026e8a5760d1c447f076f84324919a52d9abb9d7b5398e789185b7e0cad8eb36d8686b6431
SSDEEP 3072:8sGkEL9FLyrUDHBcRb5sbQUtkuAemXdZDn2p1x/LQ2mppGT8pGhQ2HtWqMPDcfuh:nGkuLyrUrpQEgn2pzcta8qMrc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 227KB

file.exe

IMPHASH b35462da489bc13bae884e55b5227599
SHA256 e62669a342d6ff770736296f60ca03957ce4dcf63aa1b98829e9f62b21b22842
MD5 546f5c81ab3a6e689a400b4e8042da41
SHA1 09a7be32eef0272ac9e40bae7452603ed7e75022
SHA512 dd717877cf26c4be7b1eb3f1cb90d600f23942c6a418a2775828e6026e8a5760d1c447f076f84324919a52d9abb9d7b5398e789185b7e0cad8eb36d8686b6431
SSDEEP 3072:8sGkEL9FLyrUDHBcRb5sbQUtkuAemXdZDn2p1x/LQ2mppGT8pGhQ2HtWqMPDcfuh:nGkuLyrUrpQEgn2pzcta8qMrc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange ReadConsoleOutputAttribute FindFirstVolumeA LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW lstrcpynW CopyFileW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx CopyFileA WriteFile GetLogicalDriveStringsA ResetEvent LocalCompact LocalReAlloc GlobalFix SetCommState WriteConsoleInputA SetHandleCount FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd SetConsoleMode GetConsoleAliasExesLengthW EnumCalendarInfoW InterlockedDecrement CallNamedPipeW GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing