file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample220925-raz95sehh7
SHA256 7f68d4d8e9e628ecf532683364d5a026d602a72b360d7e64b06fece5e714d81e
MD5 a7e35aa6675ed2990f6e522b846fadce
SHA1 06ed9ae5894079955abe183fb2b37b6e85c4c09e
SHA512 55756aa3689e43a162e53a798b17d341d087dbaf9e59481564798c2f6e90696c680382e4f83cf9e2fff6515cbd678db6992f617d772b7d16f59e1e9307bb9a71
SSDEEP 3072:pCPPXtpEAFpDAj5ujvOXefQUofw3FcJu99VxFPek/YxofyGvNBUXeY+AofzcFYFj:YNQOtVNBik/Yxh8BUuiorcq5LD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH a7175112c7bc5d5196dfbc902ebc9bcd
SHA256 7f68d4d8e9e628ecf532683364d5a026d602a72b360d7e64b06fece5e714d81e
MD5 a7e35aa6675ed2990f6e522b846fadce
SHA1 06ed9ae5894079955abe183fb2b37b6e85c4c09e
SHA512 55756aa3689e43a162e53a798b17d341d087dbaf9e59481564798c2f6e90696c680382e4f83cf9e2fff6515cbd678db6992f617d772b7d16f59e1e9307bb9a71
SSDEEP 3072:pCPPXtpEAFpDAj5ujvOXefQUofw3FcJu99VxFPek/YxofyGvNBUXeY+AofzcFYFj:YNQOtVNBik/Yxh8BUuiorcq5LD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing