win32[.]exe | Triage™

General

Target
win32.exe
Size 237KB
Sample220407-j5jxmsaebn
SHA256 44eface2d74771701600e5d9e966e3a4f136fe0b38aa60fceee0992e97e9cd9e
MD5 23b5f2f13dd12b0fcb055fd2d741bd14
SHA1 359ddfd192dba18b1cfed22b7dccac8799023f92
SHA512 7aced68ed237ab24967e243e74e13e431280b0fa1eafdb42b50b1b4bfc52bf78a09e9e8b4cc584131e0e33e0dbb898db04d132dbbe9338f8811bbc407d7a7572
SSDEEP 3072:p7/JK6oylLsL7OkPgeW9P+ISMoKGJthHZsWrdCvk59bFiq6lBzRTc3RTJHsKl4:zLi9geISMoBJtjnrHbGBNQRT1hl4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

win32.exe

.exe 237KB

win32.exe

IMPHASH 87f0c1a627fb67b4af514d448271fc09
SHA256 44eface2d74771701600e5d9e966e3a4f136fe0b38aa60fceee0992e97e9cd9e
MD5 23b5f2f13dd12b0fcb055fd2d741bd14
SHA1 359ddfd192dba18b1cfed22b7dccac8799023f92
SHA512 7aced68ed237ab24967e243e74e13e431280b0fa1eafdb42b50b1b4bfc52bf78a09e9e8b4cc584131e0e33e0dbb898db04d132dbbe9338f8811bbc407d7a7572
SSDEEP 3072:p7/JK6oylLsL7OkPgeW9P+ISMoKGJthHZsWrdCvk59bFiq6lBzRTc3RTJHsKl4:zLi9geISMoBJtjnrHbGBNQRT1hl4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39952

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextVolumeW HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterA CreateMailslotA TerminateProcess SetLastError GetVersionExA FreeResource EnumResourceNamesW FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA SetCommConfig WritePrivateProfileStructW LocalCompact ChangeTimerQueueTimer ReadConsoleInputA WriteConsoleInputW LoadResource AddAtomW SearchPathW GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc SetThreadIdealProcessor GetProfileSectionA DeleteFileW FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageW SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLCID SetWaitableTimer SetConsoleTextAttribute InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileA SetCalendarInfoA ContinueDebugEvent EndUpdateResourceW GetLastError FreeLibraryAndExitThread SetLocaleInfoW FatalAppExitA GetSystemTime OpenFileMappingW GetConsoleAliasExesLengthA lstrcmpW ReadFileScatter FlushConsoleInputBuffer DisableThreadLibraryCalls InterlockedExchangeAdd GlobalUnfix GetSystemWindowsDirectoryW GetACP GlobalFindAtomA lstrcatW GetPrivateProfileStringW SetMailslotInfo CreateActCtxW _lwrite OutputDebugStringW CreateNamedPipeW SetThreadAffinityMask SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA LoadLibraryW DebugActiveProcess WriteConsoleW GetProcAddress lstrcpyA ReadConsoleOutputW GetThreadContext EnumDateFormatsA QueryActCtxW GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameW GetConsoleAliasExesLengthW SystemTimeToTzSpecificLocalTime MoveFileWithProgressW GetStringTypeExW EnumSystemLocalesA GetPrivateProfileIntW OpenWaitableTimerA GetConsoleAliasesLengthW PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA WriteConsoleOutputCharacterA EnumDateFormatsW TerminateJobObject GetConsoleAliasExesW GetModuleFileNameW OpenMutexA RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA

Sharing