file[.]exe | Triage™

General

Target
file.exe
Size 263KB
Sample220925-12rxhsgcc6
SHA256 8a7a7c44516b9a49b825b6a6dcb387ba597c4a547dee00ec685be0b0d5842e35
MD5 1249fe7c72cf07478395d36308b9c371
SHA1 834cb567708d390dcb27f68572b41301614cdb80
SHA512 048d3b2dce3fe8f1fb6b68be06be192937639f232862ee9a8046d73e2f7e0b9444af285d5e45a7eb0e05c192aa464836dbb7d394c4bef10fa497ae6ad6084f9d
SSDEEP 3072:wpm8yIvTlA8z57hU7exZ88w19GL6xRGFQRFdKKUpE/PKtGk6v6AKmJrMpgHugMo7:cjUy3woYgQRFcdWS+KmJrM+lMos2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 263KB

file.exe

IMPHASH 3a7d8752e3d4e978a9fe1fcd2ce3b6a7
SHA256 8a7a7c44516b9a49b825b6a6dcb387ba597c4a547dee00ec685be0b0d5842e35
MD5 1249fe7c72cf07478395d36308b9c371
SHA1 834cb567708d390dcb27f68572b41301614cdb80
SHA512 048d3b2dce3fe8f1fb6b68be06be192937639f232862ee9a8046d73e2f7e0b9444af285d5e45a7eb0e05c192aa464836dbb7d394c4bef10fa497ae6ad6084f9d
SSDEEP 3072:wpm8yIvTlA8z57hU7exZ88w19GL6xRGFQRFdKKUpE/PKtGk6v6AKmJrMpgHugMo7:cjUy3woYgQRFcdWS+KmJrM+lMos2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14119

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing