krerb[.]exe | Triage™

Resubmissions

28/03/2022, 12:32

220328-pqyedaeaej10

18/01/2022, 06:25

220118-g64mbsabcm10

05/05/2021, 04:52

210505-vc9dqnmbba8

Sharing

Copy URL Twitter E-mail

General

Target
krerb.exe
Size 199KB
Sample220118-g64mbsabcm
SHA256 a8f0170ad5e5cdb0533ea888b0dbc97bc4bd23c9a0531e5e4b7cd1f05fa0875d
MD5 1c74d51a1d7177bf9b23f6a567adc047
SHA1 ecb47205a047b173c4ecaf4f476204ef7154a7ad
SHA512 0f2320ab1c60536cad706564a4ea739f2bac1b7cdd538ac1672542c9c02563292d95c2789845629ce696eca356876859a3efd57b305432d4d833fffd1b4cbef4
SSDEEP 3072:V609smhQKH9iWvem54HywwHpTtjWqo1SHs7t7/3LZ71JebssqbC03Gj852C6:zZ5dym5sykqISMRjZ7Pq03GM6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

krerb.exe

.exe 199KB

krerb.exe

IMPHASH e1dd04321898b57b50ceea449f1f3f1b
SHA256 a8f0170ad5e5cdb0533ea888b0dbc97bc4bd23c9a0531e5e4b7cd1f05fa0875d
MD5 1c74d51a1d7177bf9b23f6a567adc047
SHA1 ecb47205a047b173c4ecaf4f476204ef7154a7ad
SHA512 0f2320ab1c60536cad706564a4ea739f2bac1b7cdd538ac1672542c9c02563292d95c2789845629ce696eca356876859a3efd57b305432d4d833fffd1b4cbef4
SSDEEP 3072:V609smhQKH9iWvem54HywwHpTtjWqo1SHs7t7/3LZ71JebssqbC03Gj852C6:zZ5dym5sykqISMRjZ7Pq03GM6
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

7448

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindClose CreateFileA GetFileSize ReadFile CloseHandle GetTickCount FindResourceA LoadResource LockResource FindNextFileA VirtualAlloc VirtualProtect ExitProcess GetProcessHeap GetProcAddress LoadLibraryA CreateFileW WriteConsoleW SetFilePointerEx FindFirstFileA SizeofResource GetSystemDirectoryA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetCurrentProcess TerminateProcess GetModuleHandleExW GetACP HeapAlloc HeapFree FindFirstFileExA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode

user32

MessageBoxA

advapi32

RegOpenKeyExA RegQueryValueExA