file[.]exe | Triage™

General

Target
file.exe
Size 227KB
Sample221226-zapseaha2w
SHA256 ce032f1635d8d13cef6098b68eed12edb0583fcd373bba611228db43c19c538e
MD5 eaadb835fc9296b1aab13522c86fef97
SHA1 6a6f21ba64d98ddd297fb451ba5eb864f51d869f
SHA512 b5fd9ab38643732ed8e785948cb812e5a6c508979772882d38ae9fac1bcee68dd873b998e1ba719aff923b8b5cf5b79a51e1d460e43bda134976f5f7ee1a31b1
SSDEEP 3072:NLrVL8Eq57vrmIQnH10/Vy+ZjJH8zFj8kvjLptgkmXp+V+Y700:3L8EGCwdUmkLHAp+Vl7l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 227KB

file.exe

IMPHASH f335a5173d585221a0847f31dd0af990
SHA256 ce032f1635d8d13cef6098b68eed12edb0583fcd373bba611228db43c19c538e
MD5 eaadb835fc9296b1aab13522c86fef97
SHA1 6a6f21ba64d98ddd297fb451ba5eb864f51d869f
SHA512 b5fd9ab38643732ed8e785948cb812e5a6c508979772882d38ae9fac1bcee68dd873b998e1ba719aff923b8b5cf5b79a51e1d460e43bda134976f5f7ee1a31b1
SSDEEP 3072:NLrVL8Eq57vrmIQnH10/Vy+ZjJH8zFj8kvjLptgkmXp+V+Y700:3L8EGCwdUmkLHAp+Vl7l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14180

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW CallNamedPipeW GetSystemDirectoryA CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask GetConsoleAliasA DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime lstrcatA SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange SetConsoleMode InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CreateMutexW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharToOemBuffW

advapi32

InitiateSystemShutdownA

Sharing