gunzipped[.]exe | Triage™

General

Target
gunzipped.exe
Size 219KB
Sample220713-lbbehsfef7
SHA256 8955fde86ffc02568ef3eedf2b552a9024f1fa5a1af1ab4cd8bb4066b943f9ab
MD5 3d52a7cb61220a3e0fa5b579fcf318d5
SHA1 d37558725e7297643ec9f0fb91082c3039a28f39
SHA512 2cf38576ac360e5ef9f94c22fa84fa0347782f2e3a980e029d279c51d1a419fc9730d3826f959b07c9741fa9a752d1c17f1efb88e49127e69c159a4c58070d28
SSDEEP 3072:mQDwnLRGfpKglFALH0jBTg6yyL/ZkpFCplCqIqwtG2d2U19/DosxkgaBCha:mznV6pHF8U1ThLeLAloqwtea3iga
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

gunzipped.exe

.exe 219KB

gunzipped.exe

IMPHASH e9bb9240110bf8d3d6aaed319a1f3379
SHA256 8955fde86ffc02568ef3eedf2b552a9024f1fa5a1af1ab4cd8bb4066b943f9ab
MD5 3d52a7cb61220a3e0fa5b579fcf318d5
SHA1 d37558725e7297643ec9f0fb91082c3039a28f39
SHA512 2cf38576ac360e5ef9f94c22fa84fa0347782f2e3a980e029d279c51d1a419fc9730d3826f959b07c9741fa9a752d1c17f1efb88e49127e69c159a4c58070d28
SSDEEP 3072:mQDwnLRGfpKglFALH0jBTg6yyL/ZkpFCplCqIqwtG2d2U19/DosxkgaBCha:mznV6pHF8U1ThLeLAloqwtea3iga
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

94571

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoW _lwrite SetCommTimeouts GetSystemDirectoryW CreateEventA WriteConsoleW VerifyVersionInfoW BuildCommDCBA AddConsoleAliasA HeapLock PeekConsoleInputW EnumDateFormatsW ResetEvent UnregisterWaitEx LoadLibraryA InterlockedDecrement WaitNamedPipeA FindResourceExA DeleteTimerQueueEx GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceA GetConsoleAliasExesLengthA EnumTimeFormatsA CopyFileA UnhandledExceptionFilter WriteConsoleA LocalAlloc GetProcAddress GetUserDefaultLangID SetConsoleDisplayMode GetSystemWindowsDirectoryA FindFirstChangeNotificationW GlobalAddAtomA WritePrivateProfileStringA EnumResourceNamesW SearchPathA CreateDirectoryA RemoveDirectoryW SetFileApisToOEM GetCurrentDirectoryA GetProfileIntA SetFileAttributesW SetConsoleTitleA CreateMutexA SetProcessWorkingSetSize GetLongPathNameA SetLastError GetSystemDefaultLCID GetCurrentProcessId GetComputerNameExA FindFirstFileExA BuildCommDCBAndTimeoutsW EnterCriticalSection FindResourceExW EnumCalendarInfoExA GetDllDirectoryW GetConsoleAliasExesW GlobalMemoryStatus EnumSystemLocalesW GetComputerNameA VerifyVersionInfoA GetLastError WriteConsoleOutputCharacterW LoadLibraryW HeapFree HeapAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent SetFilePointer LeaveCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount RtlUnwind HeapCreate WriteFile GetStdHandle DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetFileType CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetStdHandle FlushFileBuffers Sleep CreateFileA HeapSize LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc SetEndOfFile GetProcessHeap CreateFileW

gdi32

GetTextExtentExPointW

Sharing