MSDev[.]exe | Triage™

General

Target
MSDev.exe
Size 254KB
Sample221101-mkad9aaha4
SHA256 b9e9b93e99d1a8fe172d70419181a74376af8188dcb03249037d4daea27f110e
MD5 a418886a31852be25064d3573f2bc87d
SHA1 a32c247d543ed54f5a4a881882fef8e14840234c
SHA512 e1b8fb71b8d544089312bc57f716d5d93bff075ac4fc1c779e649480ffadbfbfc68d1818648c4071031e2d4ef5a78bd9487902c6da8af6aeaf61cdaff1f5efb6
SSDEEP 3072:MgHUDWt2bzu+dJ+2HuyplcYKxgqiTZmiJOglGGQMp0+WoY46322bJrXDXk:9vtwzFdJ+gXp6YKxe+GQ1oh6TXk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

MSDev.exe

.exe 254KB

MSDev.exe

IMPHASH e5c48b5a6ba4c9d7bad3bbbca17432f1
SHA256 b9e9b93e99d1a8fe172d70419181a74376af8188dcb03249037d4daea27f110e
MD5 a418886a31852be25064d3573f2bc87d
SHA1 a32c247d543ed54f5a4a881882fef8e14840234c
SHA512 e1b8fb71b8d544089312bc57f716d5d93bff075ac4fc1c779e649480ffadbfbfc68d1818648c4071031e2d4ef5a78bd9487902c6da8af6aeaf61cdaff1f5efb6
SSDEEP 3072:MgHUDWt2bzu+dJ+2HuyplcYKxgqiTZmiJOglGGQMp0+WoY46322bJrXDXk:9vtwzFdJ+gXp6YKxe+GQ1oh6TXk
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

31480

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ShellExecuteA

kernel32

TlsGetValue SetEndOfFile CloseHandle Sleep GetModuleHandleA GetProcAddress LoadLibraryA CreateToolhelp32Snapshot Process32FirstW Process32NextW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess WriteConsoleW RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc RtlUnwind TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW HeapSize

Sharing