LisectAVT_2403002C_80[.]exe

General

Target
LisectAVT_2403002C_80.exe
Size 226KB
Sample240725-b9ymlathqe
SHA256 47336e3f06eb8cae1d4d9e5b93e36587c6a6434583b69e8f04ecb37335783054
MD5 a15d035df82308704d6b876de9bba3ba
SHA1 74ead1da610cab84ceef3dc124857d18f334fa5a
SHA512 85a497514d0eaa6894f676b5f643c0cf8998ead5167f650ae37a38c068f213fe1989b7325d055826ba2897ad6eec1caeaf7ece767643f286fb7d408594e56240
SSDEEP 3072:VWMmah2ipGCip1h3i9+LKIlJiK6LQfGFoOCqng4MoJLjAmPa2QpBn0bszJ+yF7DX:u1W+LKIlJiK6LQfGFotqnV9JqN7nDu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LisectAVT_2403002C_80.exe

File Explorer

LisectAVT_2403002C_80.exe

.exe 226KB

LisectAVT_2403002C_80.exe

IMPHASH 2ebc86e407c93e2f7136fcd21e3acc79
SHA256 47336e3f06eb8cae1d4d9e5b93e36587c6a6434583b69e8f04ecb37335783054
MD5 a15d035df82308704d6b876de9bba3ba
SHA1 74ead1da610cab84ceef3dc124857d18f334fa5a
SHA512 85a497514d0eaa6894f676b5f643c0cf8998ead5167f650ae37a38c068f213fe1989b7325d055826ba2897ad6eec1caeaf7ece767643f286fb7d408594e56240
SSDEEP 3072:VWMmah2ipGCip1h3i9+LKIlJiK6LQfGFoOCqng4MoJLjAmPa2QpBn0bszJ+yF7DX:u1W+LKIlJiK6LQfGFotqnV9JqN7nDu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

41676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadFile WaitForSingleObject GetCurrentProcess OpenProcess GetSystemInfo VirtualAlloc VirtualQueryEx WriteConsoleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize CreateFileW RtlUnwind

Sharing