ProjectYXscripthookfree[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ProjectYXscripthookfree.exe
Size 23KB
Sample240601-w1827aah7v
SHA256 c45f655df1aefc216f06e2025684f7acda774944f6353ac838fbb4381b026e4f
MD5 6e9ea8d5e1c7d901c043bba16b25324c
SHA1 eaded984b016dc50690c79df93165133ca797197
SHA512 df8a98b4ac2f4ebf478879be9a5ef1210fa9165364b2b52b045df6c84b0b4b7ada97c537199c7cd044589430df3532dd63470217e9faedafbc0e5df372942ab1
SSDEEP 384:stM3o2F+JaXSBeZUN/Hw38fmBXD8QGwcnHMYgjMY6eTouqicww2M:tLUzr/o3d8lHHOMYpVcz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProjectYXscripthookfree.exe

File Explorer

ProjectYXscripthookfree.exe

.exe 23KB

ProjectYXscripthookfree.exe

IMPHASH d1e8d41dfb5b8dc31e0ed7e1c14237f3
SHA256 c45f655df1aefc216f06e2025684f7acda774944f6353ac838fbb4381b026e4f
MD5 6e9ea8d5e1c7d901c043bba16b25324c
SHA1 eaded984b016dc50690c79df93165133ca797197
SHA512 df8a98b4ac2f4ebf478879be9a5ef1210fa9165364b2b52b045df6c84b0b4b7ada97c537199c7cd044589430df3532dd63470217e9faedafbc0e5df372942ab1
SSDEEP 384:stM3o2F+JaXSBeZUN/Hw38fmBXD8QGwcnHMYgjMY6eTouqicww2M:tLUzr/o3d8lHHOMYpVcz
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WriteProcessMemory SetConsoleTitleA InitializeCriticalSectionEx OpenProcess CreateToolhelp32Snapshot Sleep GlobalAddAtomA GetLastError Process32NextW Process32FirstW CloseHandle Module32FirstW DeleteCriticalSection ReadProcessMemory Module32NextW lstrcmpiW OutputDebugStringW WideCharToMultiByte LocalFree InitializeCriticalSectionAndSpinCount CreateEventW GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent

oleaut32

VariantClear SysAllocString SysFreeString

msvcp140

?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception memmove __std_terminate __std_exception_copy __std_exception_destroy memcmp __current_exception_context memchr __C_specific_handler memset _CxxThrowException memcpy

api-ms-win-crt-runtime-l1-1-0

exit _exit __p___argc __p___argv _initterm _get_initial_narrow_environment _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _set_app_type terminate _initterm_e _invalid_parameter_noinfo_noreturn system

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale