file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample230114-kmklwsdb22
SHA256 8f336bb833fca86000fba68b38f0bcfee232c32dcff20ebd814513ac393ad273
MD5 6fcf5477ab0733d5857375cefdcfdfbd
SHA1 6b68a23ebe147659c917bbf5bf91b5d5523ffb33
SHA512 4f7262e34259ac4d49f44300a40d6547ab493bdb9559b711f0b4dd46c5093dd61a7add1db7535ce590ecf73dabe077e2d2546f8afe6c9ba1562d7a6432dd69e9
SSDEEP 3072:AVXmn7/sJ5pcFsxnMoAX+QKpOVeEFUKfx9Uyapb8pBI8jwWRjoV:GsEvxnMQkVeOupgpRjFE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH a89cc745f7b3fef17467a042f8cbe600
SHA256 8f336bb833fca86000fba68b38f0bcfee232c32dcff20ebd814513ac393ad273
MD5 6fcf5477ab0733d5857375cefdcfdfbd
SHA1 6b68a23ebe147659c917bbf5bf91b5d5523ffb33
SHA512 4f7262e34259ac4d49f44300a40d6547ab493bdb9559b711f0b4dd46c5093dd61a7add1db7535ce590ecf73dabe077e2d2546f8afe6c9ba1562d7a6432dd69e9
SSDEEP 3072:AVXmn7/sJ5pcFsxnMoAX+QKpOVeEFUKfx9Uyapb8pBI8jwWRjoV:GsEvxnMQkVeOupgpRjFE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing