22817028[.]exe | Triage™

General

Target
22817028.exe
Size 379KB
Sample220319-frffhscbe2
SHA256 827dcd6eeff67fb8fd1322c9eeccc9558713bf83b4353669b3d7cc826cadf2f1
MD5 e04f6cf651fe11131d06392feeebad12
SHA1 9fa7f7ff7aaa0c62940c8cef149db5bed19d59c2
SHA512 bd82b52d04687cdfb59156ed14acaa541cbeef234d1bc76518fa2fcbb604c874a86f98be54636c83fb1200cb1c21efc00bc0a6fdb0f4c4f2ce1f10c00a308b85
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

22817028.exe

.exe 379KB

22817028.exe

IMPHASH 8d72d9e8390e0a6fb409a21cc742651c
SHA256 827dcd6eeff67fb8fd1322c9eeccc9558713bf83b4353669b3d7cc826cadf2f1
MD5 e04f6cf651fe11131d06392feeebad12
SHA1 9fa7f7ff7aaa0c62940c8cef149db5bed19d59c2
SHA512 bd82b52d04687cdfb59156ed14acaa541cbeef234d1bc76518fa2fcbb604c874a86f98be54636c83fb1200cb1c21efc00bc0a6fdb0f4c4f2ce1f10c00a308b85
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

22710

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetConsoleAliasesLengthA GetConsoleTitleA FindActCtxSectionStringA GlobalAlloc ReadConsoleInputA GetStringTypeExW LeaveCriticalSection WriteConsoleW GetMailslotInfo RaiseException LCMapStringA EnumSystemLocalesA VerifyVersionInfoW GetStdHandle GetProcAddress VirtualAlloc SetStdHandle EnterCriticalSection GetAtomNameA LoadLibraryA SetCalendarInfoW GetFileType LoadLibraryExA ContinueDebugEvent UpdateResourceW CreateMailslotA GetStringTypeW GetConsoleTitleW GetFileTime GetVersionExA GetVolumeNameForVolumeMountPointW LocalFree SetFileAttributesW CreateThread GetLocaleInfoA GetDefaultCommConfigW SetThreadContext GetComputerNameA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetConsoleCP GetConsoleMode SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID IsValidLocale GetStringTypeA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP FlushFileBuffers GetLocaleInfoW CreateFileA

user32

ScreenToClient

gdi32

GetCharWidthFloatW

advapi32

ClearEventLogW

Sharing