file[.]exe | Triage™

General

Target
file.exe
Size 318KB
Sample230107-mkdrnsdc93
SHA256 3078c13fca99a4d4f0b7de6267e50cbc10f2e8dfc89bd28ebb4d2fd091841f7c
MD5 7758076ec04c35cb5f29f449407a68ad
SHA1 b838b50f186d9093b933934dd550eab7a932f8b9
SHA512 55373aaff9849097a4843d1024d69754eb5d3ed12a5a07d503ccf82fad0a1ba6391e4058f6720b5b1aa3cea501764a386011ed42fee51f943ddf974e4f927007
SSDEEP 6144:FjLJMbyvmLptAMskZRxyJpBMS/sMdHi6Wb:FjVMbUWp/VxyfvEMi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 318KB

file.exe

IMPHASH 60df42fe8b7491613962c4519fc625cb
SHA256 3078c13fca99a4d4f0b7de6267e50cbc10f2e8dfc89bd28ebb4d2fd091841f7c
MD5 7758076ec04c35cb5f29f449407a68ad
SHA1 b838b50f186d9093b933934dd550eab7a932f8b9
SHA512 55373aaff9849097a4843d1024d69754eb5d3ed12a5a07d503ccf82fad0a1ba6391e4058f6720b5b1aa3cea501764a386011ed42fee51f943ddf974e4f927007
SSDEEP 6144:FjLJMbyvmLptAMskZRxyJpBMS/sMdHi6Wb:FjVMbUWp/VxyfvEMi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc SetComputerNameA DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA RaiseException SetStdHandle GetConsoleOutputCP HeapSize CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing