file[.]exe | Triage™

General

Target
file.exe
Size 374KB
Sample221228-zapseabe62
SHA256 61b6ee87c3fe90ce06b9efad2cfd0614a1df06e13572b27740d5be577e77f7f3
MD5 45e0264ca2703421a2370d7359c71e96
SHA1 a723202e102908c678f96783945ede860c77ca65
SHA512 89b9b583d0c6fb80916cfb2ca63472d952000d6308895de1cd1435c9a2861d3bc91fd8777354c4c21bd04e36b7e82b9d282a8e39f3d492af16681f3e48a8230b
SSDEEP 6144:yLfzc6euxN3ZbTdU7ELlfyuVewSu3TCcWvU5w2kxL1ui3tm:yPc6xxN3ZA+I9xu3kU5TqLEi3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 374KB

file.exe

IMPHASH a80d0dc9c10015fdaac0b0fe8d06a5a8
SHA256 61b6ee87c3fe90ce06b9efad2cfd0614a1df06e13572b27740d5be577e77f7f3
MD5 45e0264ca2703421a2370d7359c71e96
SHA1 a723202e102908c678f96783945ede860c77ca65
SHA512 89b9b583d0c6fb80916cfb2ca63472d952000d6308895de1cd1435c9a2861d3bc91fd8777354c4c21bd04e36b7e82b9d282a8e39f3d492af16681f3e48a8230b
SSDEEP 6144:yLfzc6euxN3ZbTdU7ELlfyuVewSu3TCcWvU5w2kxL1ui3tm:yPc6xxN3ZA+I9xu3kU5TqLEi3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15114

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing