LisectAVT_2403002B_209[.]exe

General

Target
LisectAVT_2403002B_209.exe
Size 565KB
Sample240725-bf5ttayclq
SHA256 53effbe0b363e1161baa3f6515013f6bbe585213d5293ca065dad9dc952db37d
MD5 91e5ea8115f0100e118a79d824ae7bcb
SHA1 f021ccb22e53bcad377ed4cbebee7082ad9b2b14
SHA512 02993625ccaa8716050406b2b551c7149f38d792855e282251e3901f14d1d0a608329aa0f4aeb51b7a86baf334867c40565d66d2df161b08540d899203ca2822
SSDEEP 12288:tRRWUBcOjgPPH2yWRxwLQ+Pns8Nn1UKk0U:tWWcOKObRxwLQMswn1UKk0U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LisectAVT_2403002B_209.exe

File Explorer

LisectAVT_2403002B_209.exe

.exe 565KB

LisectAVT_2403002B_209.exe

IMPHASH b4904df65844c64eb772fc58b1bf956e
SHA256 53effbe0b363e1161baa3f6515013f6bbe585213d5293ca065dad9dc952db37d
MD5 91e5ea8115f0100e118a79d824ae7bcb
SHA1 f021ccb22e53bcad377ed4cbebee7082ad9b2b14
SHA512 02993625ccaa8716050406b2b551c7149f38d792855e282251e3901f14d1d0a608329aa0f4aeb51b7a86baf334867c40565d66d2df161b08540d899203ca2822
SSDEEP 12288:tRRWUBcOjgPPH2yWRxwLQ+Pns8Nn1UKk0U:tWWcOKObRxwLQMswn1UKk0U
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

43544576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA GetConsoleAliasExesLengthA SetConsoleTextAttribute InterlockedDecrement GetModuleHandleW GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc GetVolumeInformationA GetVersionExW GetConsoleAliasW WriteConsoleW SetSystemPowerState IsDBCSLeadByte GetModuleFileNameW CreateFileW ExitThread FindResourceA ReadConsoleOutputCharacterA GetProcAddress RemoveDirectoryA LoadLibraryA FindFirstVolumeMountPointW GetNumberFormatW QueryDosDeviceW GlobalFindAtomW VirtualProtect GetCurrentDirectoryA PeekConsoleInputA GetCurrentProcessId CloseHandle SetStdHandle OutputDebugStringW LoadLibraryExW HeapReAlloc GetLastError GetEnvironmentVariableW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent HeapFree HeapAlloc GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW ExitProcess GetModuleHandleExW IsDebuggerPresent GetStdHandle GetFileType GetProcessHeap WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize GetCurrentThreadId ReadFile SetFilePointerEx GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP

user32

GetUserObjectSecurity CharLowerA GetAltTabInfoA GetClassInfoA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogW

Sharing