DNS22[.]exe | Triage™

General

Target
DNS22.exe
Size 353KB
Sample220506-hpbqnahda4
SHA256 16bbcac8ee265d2fb89c92ab1b4142e8826ca297dadc6d91f2cd6a49c89f790c
MD5 142086bda3ee6d5a0d0018ff3fefc089
SHA1 6f4fcd8c066b3c26f98935db8adaf850e1a9ec57
SHA512 e368f0fe97828f69ec982bddb84e4b45e8d8545938b523c3ace13e6263be9b80ae9b22db970c907c6abd0085bdc9675c13e6431a1a454c571dfcf3f0fd2b407e
SSDEEP 6144:nGVTAuSxt0NB6qaNnmBNLEi1J+xSCYFIaiga:KAuS0Nv6mPLE7YK/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

DNS22.exe

.exe 353KB

DNS22.exe

IMPHASH 9f4da2eaf0ba91ba83c948cd56dce29d
SHA256 16bbcac8ee265d2fb89c92ab1b4142e8826ca297dadc6d91f2cd6a49c89f790c
MD5 142086bda3ee6d5a0d0018ff3fefc089
SHA1 6f4fcd8c066b3c26f98935db8adaf850e1a9ec57
SHA512 e368f0fe97828f69ec982bddb84e4b45e8d8545938b523c3ace13e6263be9b80ae9b22db970c907c6abd0085bdc9675c13e6431a1a454c571dfcf3f0fd2b407e
SSDEEP 6144:nGVTAuSxt0NB6qaNnmBNLEi1J+xSCYFIaiga:KAuS0Nv6mPLE7YK/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20081

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary GetCurrentProcess SetDefaultCommConfigW CreateJobObjectW GetEnvironmentStringsW GetModuleHandleW EnumCalendarInfoExW GlobalAlloc LoadLibraryW GetProcessHandleCount lstrcpynW SetConsoleMode GetModuleFileNameW GetSystemDirectoryA GetBinaryTypeW FindResourceW InterlockedExchange SetLastError GetProcAddress SetComputerNameA LoadLibraryA MoveFileA TransmitCommChar CreateEventW SetProcessWorkingSetSize OpenJobObjectW SetFileAttributesW SetConsoleTitleA GetConsoleAliasesLengthW GetLastError HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate ExitProcess DecodePointer WriteFile GetStdHandle EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetModuleFileNameA FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep WriteConsoleW MultiByteToWideChar SetStdHandle FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize HeapReAlloc CreateFileW CloseHandle GetStringTypeW LCMapStringW

advapi32

ImpersonateAnonymousToken

Sharing