lidan[.]exe | Triage™

General

Target
lidan.exe
Size 124KB
Sample230123-pycsmsdb84
SHA256 97ead2057976cc989c024fa9ad761549fa57e53b16ca38aeecf3aa70da77c0ea
MD5 2e1ed9a6411f5457e15eb9962d9badc3
SHA1 bf803cfd24fe8e890e2bf420a9e27567b878f000
SHA512 b9d3be71b33b9eea68dd7274e7cb587fa5d59c073f134db147a7d74c357d8f5037a75cfa086c838129ec88a3961061f1e8d95ba00d63ceca5db79674df8cf917
SSDEEP 1536:cqTAZ3SbqVbJhTlNFsV7mt7F/E/8ZhtaOlrttD9zpqN:hu3SuVbblHzcwtaOxttDBpqN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

lidan.exe

.exe 124KB

lidan.exe

IMPHASH 3e6ae7d21837342245b8b4fd135fcfeb
SHA256 97ead2057976cc989c024fa9ad761549fa57e53b16ca38aeecf3aa70da77c0ea
MD5 2e1ed9a6411f5457e15eb9962d9badc3
SHA1 bf803cfd24fe8e890e2bf420a9e27567b878f000
SHA512 b9d3be71b33b9eea68dd7274e7cb587fa5d59c073f134db147a7d74c357d8f5037a75cfa086c838129ec88a3961061f1e8d95ba00d63ceca5db79674df8cf917
SSDEEP 1536:cqTAZ3SbqVbJhTlNFsV7mt7F/E/8ZhtaOlrttD9zpqN:hu3SuVbblHzcwtaOxttDBpqN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

8225

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar InterlockedDecrement CreateFileW GetProcAddress GetModuleHandleA LocalFree lstrlenA GetThreadLocale LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLastError HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection Sleep RtlUnwind HeapSize InterlockedExchange LoadLibraryA GetCPInfo GetACP GetOEMCP GetLocaleInfoA WideCharToMultiByte

ole32

CoInitializeSecurity CoCreateInstance

oleaut32

SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim VariantCopy VariantClear VariantInit SysAllocStringByteLen SysStringByteLen SysAllocString SysFreeString SysAllocStringLen GetErrorInfo

Resubmissions

Sharing