e6399303ceaa23310986ca0f5f6444df[.]exe

General

Target
e6399303ceaa23310986ca0f5f6444df.exe
Size 246KB
Sample240205-lycabsdag5
SHA256 d9e82b2bbf5ef1628749c4703f5d38d74b83994cdee1712f5429af889f7c1bfb
MD5 e6399303ceaa23310986ca0f5f6444df
SHA1 129b77939bbf5f50cb2f5f4248dd9f4416c15143
SHA512 8d963c6c20df166b5e1326b7c8ee30f1cbb1073500a21fb080e594be9462e733d2795c54affd9be558a5e37489b81ba9fcd910320ba96d6443aef594784ba8ae
SSDEEP 3072:VD5vK2O4jqKgfZ0njX1CvEuN9qQjH5nKfMdptyD6P0s4iNc:Vlv9O0jXhurjZKfMQ1s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6399303ceaa23310986ca0f5f6444df.exe

File Explorer

e6399303ceaa23310986ca0f5f6444df.exe

.exe 246KB

e6399303ceaa23310986ca0f5f6444df.exe

IMPHASH ebe35e0085e613a421d4abea9476d495
SHA256 d9e82b2bbf5ef1628749c4703f5d38d74b83994cdee1712f5429af889f7c1bfb
MD5 e6399303ceaa23310986ca0f5f6444df
SHA1 129b77939bbf5f50cb2f5f4248dd9f4416c15143
SHA512 8d963c6c20df166b5e1326b7c8ee30f1cbb1073500a21fb080e594be9462e733d2795c54affd9be558a5e37489b81ba9fcd910320ba96d6443aef594784ba8ae
SSDEEP 3072:VD5vK2O4jqKgfZ0njX1CvEuN9qQjH5nKfMdptyD6P0s4iNc:Vlv9O0jXhurjZKfMQ1s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement MoveFileExW OpenJobObjectA SetDefaultCommConfigW CreateDirectoryW GetTickCount GetProcessHeap GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetSystemTimes WideCharToMultiByte LoadLibraryW CompareStringW GetStartupInfoW WritePrivateProfileStringW FlushFileBuffers GetConsoleAliasesW HeapAlloc SetLastError GetProcAddress CreateNamedPipeA EnumDateFormatsExA ResetEvent OpenWaitableTimerA LoadLibraryA LocalAlloc DnsHostnameToComputerNameA SetProcessWorkingSetSize FreeEnvironmentStringsW GetCurrentDirectoryA FileTimeToLocalFileTime GetVolumeInformationW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetLocaleInfoA SetCurrentDirectoryA GetModuleHandleExA EncodePointer DecodePointer GetCommandLineA HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc RtlUnwind HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent CloseHandle WriteConsoleW SetStdHandle CreateFileW RaiseException

user32

DestroyIcon GetClassLongW

advapi32

ReadEventLogA GetServiceKeyNameA

Name

.text

Size

157KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.diconeb

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kesufo

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e6399303ceaa23310986ca0f5f6444df.exe

kernel32

user32

advapi32

generic