file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample230103-jktaksag57
SHA256 d75a9020eaed16f9b4e4326ff54dbdf90cc66656a87884e5fab69445ff1c14be
MD5 a5f9d6be684594deff49c5902ecd5db7
SHA1 e2ce490c684493056522f415f67d6ad22b8f4bb8
SHA512 eb1f9c3761b0221fded2b694dd3af75d6ba3619dc33a3e638a080bd1905cb647d9a1ee723dcf64a0176478fec727ad92ac0e355215c1771f0124dc7de27e161a
SSDEEP 6144:G3ML36blV9KhKwM36I/h0ioR0wjAWTM4xVvkHb+ewx:oMT6XGKw0poHXTMENi+r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH ac60a8dcc69324c92e3ea84189250edd
SHA256 d75a9020eaed16f9b4e4326ff54dbdf90cc66656a87884e5fab69445ff1c14be
MD5 a5f9d6be684594deff49c5902ecd5db7
SHA1 e2ce490c684493056522f415f67d6ad22b8f4bb8
SHA512 eb1f9c3761b0221fded2b694dd3af75d6ba3619dc33a3e638a080bd1905cb647d9a1ee723dcf64a0176478fec727ad92ac0e355215c1771f0124dc7de27e161a
SSDEEP 6144:G3ML36blV9KhKwM36I/h0ioR0wjAWTM4xVvkHb+ewx:oMT6XGKw0poHXTMENi+r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16382

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW ReadConsoleA GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount TlsSetValue LoadLibraryW GetConsoleAliasW WriteConsoleW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc ResetEvent LoadLibraryA GetProcessWorkingSetSize SetConsoleDisplayMode LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetLastError WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeA GetStringTypeW CloseHandle WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing