triage_dropped_file

General

Target
triage_dropped_file
Size 369KB
Sample220209-p6x4jsaedn
SHA256 56af735df3885da36c827217daeb8e4a9fe38ed04d080e33c8df7afb5fa3ebff
MD5 9a685ba0f2774361a68da51d608fd07c
SHA1 ea5b0579921d9850cf51cc2815fcce2b6c7621c6
SHA512 505f8ab7232c8571315195d6a6609a913b45f15fbafebdc6e9cc6504c990e3b6e1eb68f3a45c6c3af00990f48eb99f3fb6da5af04e06a26c3baa1bd4f524bd31
SSDEEP 6144:O56dLjBFLyztOoieYIjAmkB8lebi9JqGXdZ32mneM0laNUIbeURK46:YszuzNJjWB8f9JqQ2mnB0l4UMK46
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

triage_dropped_file

.dll 369KB

triage_dropped_file

IMPHASH 79fb40281049052b3e354a6e444da473
SHA256 56af735df3885da36c827217daeb8e4a9fe38ed04d080e33c8df7afb5fa3ebff
MD5 9a685ba0f2774361a68da51d608fd07c
SHA1 ea5b0579921d9850cf51cc2815fcce2b6c7621c6
SHA512 505f8ab7232c8571315195d6a6609a913b45f15fbafebdc6e9cc6504c990e3b6e1eb68f3a45c6c3af00990f48eb99f3fb6da5af04e06a26c3baa1bd4f524bd31
SSDEEP 6144:O56dLjBFLyztOoieYIjAmkB8lebi9JqGXdZ32mneM0laNUIbeURK46:YszuzNJjWB8f9JqQ2mnB0l4UMK46
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

53287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess GetNativeSystemInfo FreeLibrary HeapAlloc HeapFree GetTickCount VirtualFree GetProcessHeap IsBadReadPtr GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA VirtualProtect Sleep SetConsoleTextAttribute SetConsoleCursorPosition GetStdHandle SetConsoleCursorInfo SetEnvironmentVariableA HeapSize FlushFileBuffers GetSystemTimeAsFileTime HeapReAlloc GetConsoleMode GetNumberOfConsoleInputEvents PeekConsoleInputA ReadConsoleInputA SetConsoleMode MultiByteToWideChar WideCharToMultiByte EncodePointer DecodePointer CreateThread GetCurrentThreadId ExitThread LoadLibraryExW EnterCriticalSection LeaveCriticalSection IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA GetModuleHandleExW AreFileApisANSI WriteFile GetModuleFileNameW DeleteCriticalSection CreateFileW CloseHandle RtlUnwind ReadFile ReadConsoleW IsValidCodePage GetACP GetOEMCP GetCPInfo GetConsoleCP GetTimeZoneInformation UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW WriteConsoleW WaitForSingleObject GetExitCodeProcess CreateProcessA GetFileAttributesExW SetStdHandle SetFilePointerEx GetStringTypeW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetEndOfFile

user32

SendMessageA ShowWindow

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

triage_dropped_file

kernel32

user32

winmm