LisectAVT_2403002C_79[.]dll

General

Target
LisectAVT_2403002C_79.dll
Size 236KB
Sample240725-b9ymla1ejp
SHA256 0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4
MD5 054fe8737240e1c7a9ac9c271fa9cdce
SHA1 4a3d6a022223757db803dcf0aa47aab0c4f10eee
SHA512 4b31d170a495abbde9e4f119fd5974f3d6edd32a2db837308f28edb4929d068363ee15e2e2bcb366b4923e4f40288d5256ad8ec80787e75c5d5385e4bcfc3b78
SSDEEP 6144:g1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:g1GmSafShjYdd96z/6cwdC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LisectAVT_2403002C_79.dll

File Explorer

LisectAVT_2403002C_79.dll

.dll 236KB

LisectAVT_2403002C_79.dll

IMPHASH ed2860c18f5483e3b5388bad75169dc1
SHA256 0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4
MD5 054fe8737240e1c7a9ac9c271fa9cdce
SHA1 4a3d6a022223757db803dcf0aa47aab0c4f10eee
SHA512 4b31d170a495abbde9e4f119fd5974f3d6edd32a2db837308f28edb4929d068363ee15e2e2bcb366b4923e4f40288d5256ad8ec80787e75c5d5385e4bcfc3b78
SSDEEP 6144:g1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:g1GmSafShjYdd96z/6cwdC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=235, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=338, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=420, id=257, productName=VS2017 v15.5.4 build 25834, version=25834,

count=507, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=146, id=157, productName=VS2010 build 30319, version=30319,

count=223, id=110, productName=VS2005 build 50727, version=50727,

count=381, id=203, productName=VS2012 build 50727, version=50727,

count=507, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=332, id=223, productName=VS2013 UPD4 build 31101, version=31101,

count=179, id=224, productName=VS2013 build 21005, version=21005,

count=475, id=122, productName=VS2005 build 50727, version=50727,

count=11, id=131, productName=VS2008 build 21022, version=21022,

count=316, id=225, productName=VS2013 build 21005, version=21005,

count=235, id=259, productName=VS2015 [14.0] build 23026, version=23026,

count=11, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=43, id=207, productName=VS2012 build 50727, version=50727,

count=261, id=201, productName=VS2012 UPD2 build 60315, version=60315,

count=325, id=223, productName=VS2013 UPD3 build 30723, version=30723,

count=209, id=207, productName=VS2012 build 50727, version=50727,

count=228, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=30, id=223, productName=VS2013 UPD4 build 31101, version=31101,

count=405, id=149, productName=VS2008 build 21022, version=21022,

count=343, id=155, productName=VS2010 build 30319, version=30319,

count=46, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=216, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=385, id=222, productName=VS2013 UPD2 build 30501, version=30501,

count=421, id=131, productName=VS2008 build 21022, version=21022,

count=79, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=121, id=261, productName=VS2015 UPD2 build 23918, version=23918,

LisectAVT_2403002C_79.dll

advapi32

kernel32

winspool.drv

setupapi

msvcrt

user32

ole32

shlwapi

generic

Sharing

General

Malware Config

Signatures

File Explorer

LisectAVT_2403002C_79.dll

advapi32

kernel32

winspool.drv

setupapi

msvcrt

user32

ole32

shlwapi

generic