LisectAVT_2403002B_62[.]exe

General

Target
LisectAVT_2403002B_62.exe
Size 308KB
Sample240725-b2e6aatckg
SHA256 4cc124d51c471981e95c0993c4c6f44808228e4465ff2f7dbcd1e5824a8ecf39
MD5 a4d3086ce4c817e4f7cb572a21e07b39
SHA1 326e56ae3e0ea3bb869e623d37912aa67854890c
SHA512 ced8af1deb23fb5431ace0bfd0bee92191a1a8217d7b4d5a2aae0e937af53d60d23b40160f9ebfd8e5f45b42fa231ba94dbae2534e0cade26e785cd36beee8f0
SSDEEP 6144:YZ5fh1s4mex2OO8bAiZ0YDChe8UN5alW6jx+J:85frs4f2OOm/Ao8UNglGJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LisectAVT_2403002B_62.exe

File Explorer

LisectAVT_2403002B_62.exe

.exe 308KB

LisectAVT_2403002B_62.exe

IMPHASH 3f875ad300fc349e53363f89de2d25fd
SHA256 4cc124d51c471981e95c0993c4c6f44808228e4465ff2f7dbcd1e5824a8ecf39
MD5 a4d3086ce4c817e4f7cb572a21e07b39
SHA1 326e56ae3e0ea3bb869e623d37912aa67854890c
SHA512 ced8af1deb23fb5431ace0bfd0bee92191a1a8217d7b4d5a2aae0e937af53d60d23b40160f9ebfd8e5f45b42fa231ba94dbae2534e0cade26e785cd36beee8f0
SSDEEP 6144:YZ5fh1s4mex2OO8bAiZ0YDChe8UN5alW6jx+J:85frs4f2OOm/Ao8UNglGJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW LoadLibraryW SetSystemTimeAdjustment GetCPInfoExW GetLastError GetProcAddress LocalAlloc HeapSetInformation LocalSize FindAtomW FindActCtxSectionStringW GetConsoleSelectionInfo GetCommandLineA GetStartupInfoW DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep FatalAppExitA RtlUnwind RaiseException SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW HeapAlloc HeapReAlloc FlushFileBuffers HeapSize CreateFileW CloseHandle GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

Name

.text

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

LisectAVT_2403002B_62.exe

kernel32

generic