win32[.]exe | Triage™

General

Target
win32.exe
Size 249KB
Sample220405-kqevtaffgp
SHA256 a4fbcf0da39f90df5791fa1f3908403eb99e2cf21fd02d069501e2833dc24bfd
MD5 0f454af34a3a6e3a26db1bc14e0c1ee3
SHA1 dc341247add5c6ab99bf3c4768bbe6cf27ecd015
SHA512 98b1f60e2ac6e2f544b3eb74ef3c9673859643e704022154b11b8d7d751b2287189c62b17d3026c11e684aa49c22cd654b67721b18fefd69fc7161ad7096bb8c
SSDEEP 6144:WtGsIjQDMf9Qu0Kr12uvIs7OLSimOJTqy:WtujQIf9QZKrlgs7OGun
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

win32.exe

.exe 249KB

win32.exe

IMPHASH 25245420ce2e5010c32179ae5d5b5793
SHA256 a4fbcf0da39f90df5791fa1f3908403eb99e2cf21fd02d069501e2833dc24bfd
MD5 0f454af34a3a6e3a26db1bc14e0c1ee3
SHA1 dc341247add5c6ab99bf3c4768bbe6cf27ecd015
SHA512 98b1f60e2ac6e2f544b3eb74ef3c9673859643e704022154b11b8d7d751b2287189c62b17d3026c11e684aa49c22cd654b67721b18fefd69fc7161ad7096bb8c
SSDEEP 6144:WtGsIjQDMf9Qu0Kr12uvIs7OLSimOJTqy:WtujQIf9QZKrlgs7OGun
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56000

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW SetLocaleInfoW FindNextVolumeW HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterA CreateMailslotW TerminateProcess SetLastError GetVersionExW FreeResource EnumResourceNamesA FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA GetCommConfig WritePrivateProfileStructW LocalShrink ChangeTimerQueueTimer ReadConsoleInputW WriteConsoleInputW LoadResource AddAtomA SearchPathW GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc SetThreadIdealProcessor GetProfileSectionW DeleteFileA FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageW SetDllDirectoryA LoadLibraryA WritePrivateProfileStringW GetUserDefaultLCID TerminateThread SetWaitableTimer SetConsoleTextAttribute InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileW SetCalendarInfoA WaitForDebugEvent EndUpdateResourceW GetLastError OpenFileMappingW GetConsoleAliasExesLengthA lstrcmpA ReadFileScatter FlushConsoleInputBuffer DisableThreadLibraryCalls InterlockedExchangeAdd GlobalFix GetSystemWindowsDirectoryW CopyFileA GetACP GlobalFindAtomA lstrcatW GetPrivateProfileStringA SetMailslotInfo CreateActCtxA OutputDebugStringA CreateNamedPipeW SetThreadAffinityMask SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA LoadLibraryW DebugActiveProcess WriteConsoleA GetProcAddress lstrcpyA GetThreadContext QueryActCtxW GetConsoleCP GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameW GetConsoleAliasExesLengthW CreateMailslotA SystemTimeToTzSpecificLocalTime MoveFileWithProgressA ContinueDebugEvent GetStringTypeExA EnumSystemLocalesW GetPrivateProfileIntA FreeLibrary GetModuleFileNameW OpenWaitableTimerA GetConsoleAliasesLengthW GetNamedPipeHandleStateA WriteConsoleOutputCharacterW TerminateJobObject GetConsoleAliasExesW EnumDateFormatsA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind HeapValidate IsBadReadPtr TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess SetHandleCount GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer SetStdHandle GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA

Sharing