triage_dropped_file

General

Target
triage_dropped_file
Size 257KB
Sample220615-nqkmvaeccq
SHA256 94530ab0faaaaa62e3bdf0e97eaeb578bcf5613a4a69e73b89de3c0b45f63287
MD5 88beabeef5456b89e5b6c23c1bf54f13
SHA1 24485e438f08a2ba2c427ab05082a6b63cad309c
SHA512 cf803e37e209f4cbbe36f573924af8d79acaf033a0a8ea03e894689c1fda9251d443cbb46ed54d080425993c14fc975527a0581b0fcfa8adb8d06fff37e9ba4d
SSDEEP 3072:Y4iMp8oJth/gS9PIbkshpPhuPnxJfGkQJMOBa:h1Jth/R9wnpPgPnxRGpJM9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

triage_dropped_file

.exe 257KB

triage_dropped_file

IMPHASH 9f1e79040a424d41a8e04c6d4485b450
SHA256 94530ab0faaaaa62e3bdf0e97eaeb578bcf5613a4a69e73b89de3c0b45f63287
MD5 88beabeef5456b89e5b6c23c1bf54f13
SHA1 24485e438f08a2ba2c427ab05082a6b63cad309c
SHA512 cf803e37e209f4cbbe36f573924af8d79acaf033a0a8ea03e894689c1fda9251d443cbb46ed54d080425993c14fc975527a0581b0fcfa8adb8d06fff37e9ba4d
SSDEEP 3072:Y4iMp8oJth/gS9PIbkshpPhuPnxJfGkQJMOBa:h1Jth/R9wnpPgPnxRGpJM9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25012

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddRefActCtx OpenEventA EnumCalendarInfoExA WriteConsoleInputW ReadConsoleInputA GetSystemDirectoryW WriteConsoleW FreeUserPhysicalPages WaitNamedPipeA BuildCommDCBA InterlockedIncrement BeginUpdateResourceA CancelTimerQueueTimer GetCPInfoExW GetModuleFileNameW GetConsoleAliasExesLengthW EnumTimeFormatsW MoveFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthA GlobalAlloc GetProcAddress LoadLibraryW GetUserDefaultLCID CancelWaitableTimer SizeofResource WaitForMultipleObjects lstrlenW EnumResourceNamesA CommConfigDialogA SetFileAttributesW AreFileApisANSI LCMapStringW GetFileAttributesA SetConsoleTitleA CreateHardLinkW GetCurrentProcessId SetLastError GetUserDefaultLangID GetConsoleProcessList BuildCommDCBAndTimeoutsW OpenJobObjectW FindResourceExA SetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesW InitializeCriticalSection SetConsoleCP GetCPInfoExA GetLastError CloseHandle FlushFileBuffers CreateFileW HeapSize HeapReAlloc HeapAlloc MultiByteToWideChar RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapFree GetModuleHandleW ExitProcess WriteFile GetStdHandle GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection Sleep GetStringTypeW SetStdHandle

user32

ClientToScreen

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

triage_dropped_file

kernel32

user32

winhttp