gunzipped[.]exe | Triage™

General

Target
gunzipped.exe
Size 270KB
Sample220414-mntmasbac8
SHA256 4a4a4c441355bbf90def9ab2aec89335f93237487e670df04b3d63c65b5be25a
MD5 4332f0c0baa163ca13506e81b24b25ea
SHA1 f43d4def1288ee50719aad128ee5cdc8b60c256e
SHA512 271de625607fb85050d8837cc907ae40735c9dfd0fa266f8eb6252ab3f04c7b9c4b16d39e79b098eda975bba9c362a07439c27b930f750640f4615d290059f12
SSDEEP 6144:cmAT6ZnH17NosgzQDCenNH3MkklrEQEgugO:JUmnV7NoxzQXnNXdkloQE5g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

gunzipped.exe

.exe 270KB

gunzipped.exe

IMPHASH 94b2a109e36c2af8f2a1ba35e83f978c
SHA256 4a4a4c441355bbf90def9ab2aec89335f93237487e670df04b3d63c65b5be25a
MD5 4332f0c0baa163ca13506e81b24b25ea
SHA1 f43d4def1288ee50719aad128ee5cdc8b60c256e
SHA512 271de625607fb85050d8837cc907ae40735c9dfd0fa266f8eb6252ab3f04c7b9c4b16d39e79b098eda975bba9c362a07439c27b930f750640f4615d290059f12
SSDEEP 6144:cmAT6ZnH17NosgzQDCenNH3MkklrEQEgugO:JUmnV7NoxzQXnNXdkloQE5g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39728

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetSystemTimeAdjustment VerSetConditionMask FindNextVolumeA HeapWalk GetNamedPipeHandleStateA FileTimeToLocalFileTime FillConsoleOutputCharacterW VirtualAlloc TerminateProcess GetCurrentProcessId GetVersionExW EnumDateFormatsExA EnumResourceNamesA FindNextFileA CopyFileExA BuildCommDCBA SetDefaultCommConfigW WritePrivateProfileStructA HeapQueryInformation ChangeTimerQueueTimer ReadConsoleInputW WriteConsoleInputA GetVersionExA AddAtomA SearchPathW GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA LocalAlloc SetProcessPriorityBoost GetProfileSectionA FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageA SetDllDirectoryW PostQueuedCompletionStatus LoadLibraryA WritePrivateProfileStringW GetUserDefaultLCID GetProcessHeap SetWaitableTimer SetConsoleTextAttribute InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileA GetLastError SetCalendarInfoA DebugBreak EndUpdateResourceA SetLastError DeleteVolumeMountPointA FatalAppExitA OpenFileMappingA GetConsoleAliasExesLengthA lstrcmpA SetDefaultCommConfigA ContinueDebugEvent InterlockedExchangeAdd GlobalFix CopyFileW GetACP GlobalFindAtomA lstrcatA GetPrivateProfileStringA GetMailslotInfo CreateActCtxW GetPrivateProfileIntW _lwrite CreateIoCompletionPort CreateNamedPipeA GetAtomNameW FlushConsoleInputBuffer EnumResourceTypesA lstrlenA MoveFileW WriteConsoleA lstrcpyA GetModuleHandleW ReadConsoleOutputW SetThreadContext BuildCommDCBW ReleaseActCtx GetStringTypeA GetPrivateProfileStringW GetFileAttributesExA MoveFileA GetVolumePathNameW SetCommMask SetFileShortNameW VerLanguageNameA LockFile EnumDateFormatsW WTSGetActiveConsoleSessionId LoadLibraryW GetOverlappedResult AttachConsole GlobalGetAtomNameA SetComputerNameW GetConsoleAliasExesLengthW CreateMailslotA SystemTimeToTzSpecificLocalTime MoveFileWithProgressW DebugActiveProcess GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntA GetTickCount GetModuleFileNameA GetConsoleAliasesLengthW GlobalWire GetCompressedFileSizeW SetThreadPriority MapUserPhysicalPages WriteConsoleOutputCharacterW EnumDateFormatsA TerminateJobObject CreateFileA GetDateFormatA GetConsoleAliasExesW OpenWaitableTimerW RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime Sleep InterlockedDecrement GetProcAddress ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CloseHandle FlushFileBuffers

Sharing