build2[.]exe | Triage™

General

Target
build2.exe
Size 603KB
Sample220419-gn6c7sbef7
SHA256 ba981a94852325debf0e4b478266f6efd8e4e9c5b149fd9ad277be0be5045768
MD5 a13e3b18282318c65f096bad322b3c50
SHA1 2c76179e95e583b588bcd516e94e7a2da52d5299
SHA512 acb009f4b622ab7e8729dac2c45da975ba2305612c9575e5c8ce221edecf2d49da2236fc28b00d8f424a251765b935d8acce7bf40a1557d9fc79ba446250e786
SSDEEP 12288:MGZ2HFfo3kZh7jxCrQ4nc/fMxtHO9DW1w+hQwzrN5S:MkU+3kL+c3MzCDgw+1J5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

build2.exe

.exe 603KB

build2.exe

IMPHASH 33f654ee7835845e395c50475d4ae5e3
SHA256 ba981a94852325debf0e4b478266f6efd8e4e9c5b149fd9ad277be0be5045768
MD5 a13e3b18282318c65f096bad322b3c50
SHA1 2c76179e95e583b588bcd516e94e7a2da52d5299
SHA512 acb009f4b622ab7e8729dac2c45da975ba2305612c9575e5c8ce221edecf2d49da2236fc28b00d8f424a251765b935d8acce7bf40a1557d9fc79ba446250e786
SSDEEP 12288:MGZ2HFfo3kZh7jxCrQ4nc/fMxtHO9DW1w+hQwzrN5S:MkU+3kL+c3MzCDgw+1J5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28474

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumePathNameW LoadLibraryW GetProcessHandleCount InterlockedPopEntrySList lstrcpynW WriteConsoleW LocalHandle GetMailslotInfo GetModuleFileNameW GetConsoleAliasesW GetLongPathNameW SetLastError MoveFileW SetComputerNameA EnterCriticalSection LoadLibraryA WriteConsoleA LocalAlloc IsWow64Process SetConsoleWindowInfo GetModuleFileNameA UpdateResourceW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetShortPathNameW GetCPInfoExA GetFileInformationByHandle SetFileAttributesW CreateThread CreateFileW GetConsoleAliasesLengthA WriteProfileSectionW EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode RaiseException HeapReAlloc RtlUnwind SetStdHandle FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CloseHandle

user32

ClientToScreen

gdi32

GetTextExtentExPointW

advapi32

ClearEventLogA

Resubmissions

Sharing