file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 322KB
Sample230109-zapgmsff66
SHA256 ffc6ecdf8bbe3a19f1a9975d95cc1cf4da24cbb5f78f669a50d616a1fad396bf
MD5 9a6a97927d89216d2270002eedbd7c30
SHA1 f0165d2650a4886e80002dd628dfde0b8a9cc349
SHA512 b46022732ebc3372e0717fea09c62384d39ced473895a22178fcaeaea80c7ef3a15fab306d93c6210cd8cc24646809e1174be175efadff6aee3b19875a9a2cd8
SSDEEP 3072:2XOghL/OpifvTzTo5uWrthikthshnh1Y+qG+zl4aUyc4lZzkuWdjJrhtiw5cy9VX:eP/OcHT/W5hiGhl+qGvNGwTHj7vmf/e
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 46e2ecbaa2319cb9624b037c867ffa79
SHA256 ffc6ecdf8bbe3a19f1a9975d95cc1cf4da24cbb5f78f669a50d616a1fad396bf
MD5 9a6a97927d89216d2270002eedbd7c30
SHA1 f0165d2650a4886e80002dd628dfde0b8a9cc349
SHA512 b46022732ebc3372e0717fea09c62384d39ced473895a22178fcaeaea80c7ef3a15fab306d93c6210cd8cc24646809e1174be175efadff6aee3b19875a9a2cd8
SSDEEP 3072:2XOghL/OpifvTzTo5uWrthikthshnh1Y+qG+zl4aUyc4lZzkuWdjJrhtiw5cy9VX:eP/OcHT/W5hiGhl+qGvNGwTHj7vmf/e
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27533

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA Beep GetFileAttributesW GetBinaryTypeA GetConsoleFontSize GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW SetComputerNameA ReadConsoleA LoadLibraryA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue IsBadStringPtrW BuildCommDCBW RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP GetProcessHeap GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize FlushFileBuffers SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt