triage_dropped_file

General

Target
triage_dropped_file
Size 408KB
Sample220615-nqkmvaeccr
SHA256 cb64fb549378618ef3e98dede93dc5b2071bb25630fb344af876f4077056acae
MD5 77d29227b6708ac857f9b8f8793f7be8
SHA1 0c9ffeda91c0986eefea7d23b09521758e27d595
SHA512 844a87f32d3c68b5bd81fe77e9210c1cb0a694d5f310bd88d23725bfba1fcb3842d07f496d2a495d65d5d92450ceefb51e0197011cabccb664a00207f37429f3
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVN53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPb5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

triage_dropped_file

.dll 408KB

triage_dropped_file

IMPHASH 7f17bee5c6b681d4f6afdf362cb13b3c
SHA256 cb64fb549378618ef3e98dede93dc5b2071bb25630fb344af876f4077056acae
MD5 77d29227b6708ac857f9b8f8793f7be8
SHA1 0c9ffeda91c0986eefea7d23b09521758e27d595
SHA512 844a87f32d3c68b5bd81fe77e9210c1cb0a694d5f310bd88d23725bfba1fcb3842d07f496d2a495d65d5d92450ceefb51e0197011cabccb664a00207f37429f3
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVN53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPb5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

97024

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

CreateFileW ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW OutputDebugStringW HeapReAlloc EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP SetLastError GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

triage_dropped_file

ws2_32

kernel32

ole32