file[.]exe | Triage™

General

Target
file.exe
Size 263KB
Sample220925-3yetwshgen
SHA256 7b8b69ec09de1577c165874a5a91248a10ba20ed3d3ef9275091cb08b2dddfd1
MD5 e6bcdf0eb798c2b873e23f28ef834e19
SHA1 458138b51c260880b851ad1bdea0ee473ba0efcb
SHA512 071a4497d7e1ae0a8f51add1a940b5e2c881cca44c98439a0f1138cd474e28ae8591b8f0b05c75dddf5b2d751eddc2ac5618c2b30af405eae7924bcdcdc40382
SSDEEP 6144:CArCR98rDAuP1wFyAKibAPaf5V8NL43sb:CEe8rDQUAVAyQd48b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 263KB

file.exe

IMPHASH 3a7d8752e3d4e978a9fe1fcd2ce3b6a7
SHA256 7b8b69ec09de1577c165874a5a91248a10ba20ed3d3ef9275091cb08b2dddfd1
MD5 e6bcdf0eb798c2b873e23f28ef834e19
SHA1 458138b51c260880b851ad1bdea0ee473ba0efcb
SHA512 071a4497d7e1ae0a8f51add1a940b5e2c881cca44c98439a0f1138cd474e28ae8591b8f0b05c75dddf5b2d751eddc2ac5618c2b30af405eae7924bcdcdc40382
SSDEEP 6144:CArCR98rDAuP1wFyAKibAPaf5V8NL43sb:CEe8rDQUAVAyQd48b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14119

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing