e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f

General

Target
e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f
Size 417KB
Sample240409-dspz8sch26
SHA256 e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f
MD5 6ac97d740fb5c90ede238029d8318688
SHA1 b097cc2912d08413a44a88fc04ac459bd74b3bad
SHA512 7b2a61d1567b29ff8e03ddf5d015b5ab4ca77dc901a2a5c69c9dd478dd65ab4b4ea70e6bf7b2f3c897aeb06938a376d1b7e4ea9662911d6a6f9ca5b5715d3b18
SSDEEP 6144:lekZjybv1yL3TVNO6KtZ1e7ieg+BdOV1n8As8Pp+/XpkBaVjcSQzQ7/2kvT:lNjco3TxA3CierL8Ps0aVw8F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f

File Explorer

e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f

.exe 417KB

e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f

IMPHASH 71666ce513898b08ba38dfa1dc35ec76
SHA256 e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f
MD5 6ac97d740fb5c90ede238029d8318688
SHA1 b097cc2912d08413a44a88fc04ac459bd74b3bad
SHA512 7b2a61d1567b29ff8e03ddf5d015b5ab4ca77dc901a2a5c69c9dd478dd65ab4b4ea70e6bf7b2f3c897aeb06938a376d1b7e4ea9662911d6a6f9ca5b5715d3b18
SSDEEP 6144:lekZjybv1yL3TVNO6KtZ1e7ieg+BdOV1n8As8Pp+/XpkBaVjcSQzQ7/2kvT:lNjco3TxA3CierL8Ps0aVw8F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

18958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lec69\madero81_netecaza\teyideyecu_yicusuv\lexet.pdb

kernel32

ReadConsoleA InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetUserDefaultLCID InterlockedCompareExchange GetModuleHandleW EnumCalendarInfoExW SetCommState EnumResourceTypesA TlsSetValue FindResourceExA LoadLibraryW GetVersionExW DeleteVolumeMountPointW GetFileAttributesA SetConsoleMode GetConsoleAliasW HeapValidate SetConsoleCursorPosition GetMailslotInfo WritePrivateProfileStringW GetStringTypeExA CreateJobObjectA GetProfileIntA GetCPInfoExW GetCommState GetLastError InterlockedFlushSList GetProcAddress VirtualAlloc BackupWrite WriteProfileSectionA RemoveDirectoryA SetStdHandle LocalAlloc MoveFileA AddAtomW BeginUpdateResourceA FoldStringA GetModuleHandleA FreeEnvironmentStringsW VirtualProtect OpenEventW QueryPerformanceFrequency GetShortPathNameW GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak DeleteFileA VerSetConditionMask GetConsoleAliasesLengthW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharLowerBuffW

gdi32

SelectPalette GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

e2979f971ed69314f95db618da853c7cb201c6ab21b46a6d7d3108f5741a0e0f

kernel32

user32

gdi32

generic