file[.]exe | Triage™

General

Target
file.exe
Size 467KB
Sample230103-mkdfxabb47
SHA256 fe570e1a1a4b39dcf828ce0860d7180eb42b3be56199ad1d2211bb740a5e73dc
MD5 ade800a2c26989af77af74b62e9055a1
SHA1 6cd4a2d4045f7adf73002a227e659a43610c5fd2
SHA512 7293c6a63be4444d43b2285c1c63094628e329e71247e89b6da7d82bf466df19ddf85deee808cd6f0430a3e6e2c9230cb39b339c6d7ccf64022a0c7c52da757a
SSDEEP 6144:7/fLCcyZ0HTAwofyy/HJ0d8+Y9zPnhEDmBV7w4tjAWTM4xVvkHb+ewB:rfGcyZGTAdKiHYYFhYmLcYXTMENi+7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 467KB

file.exe

IMPHASH ac60a8dcc69324c92e3ea84189250edd
SHA256 fe570e1a1a4b39dcf828ce0860d7180eb42b3be56199ad1d2211bb740a5e73dc
MD5 ade800a2c26989af77af74b62e9055a1
SHA1 6cd4a2d4045f7adf73002a227e659a43610c5fd2
SHA512 7293c6a63be4444d43b2285c1c63094628e329e71247e89b6da7d82bf466df19ddf85deee808cd6f0430a3e6e2c9230cb39b339c6d7ccf64022a0c7c52da757a
SSDEEP 6144:7/fLCcyZ0HTAwofyy/HJ0d8+Y9zPnhEDmBV7w4tjAWTM4xVvkHb+ewB:rfGcyZGTAdKiHYYFhYmLcYXTMENi+7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16382

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW ReadConsoleA GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount TlsSetValue LoadLibraryW GetConsoleAliasW WriteConsoleW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc ResetEvent LoadLibraryA GetProcessWorkingSetSize SetConsoleDisplayMode LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetLastError WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeA GetStringTypeW CloseHandle WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing