MEVVEUJXK857AD7LB19EBWVGKD32[.]exe

Resubmissions

12/04/2025, 17:09

250412-vpmjdaywh13

12/04/2025, 07:04

250412-hv1a7szkt43

Sharing

Copy URL Twitter E-mail

General

Target
MEVVEUJXK857AD7LB19EBWVGKD32.exe
Size 13.1MB
Sample250412-vpmjdaywh1
SHA256 562dbca7396b224cd14176ab7b156586d166c7f622274ebdca159ce53cec84e6
MD5 c655ed0db252b31ca6c4b41d7ff9d616
SHA1 1ce0a77d5c073d03cd085a46e7594ebb8bc4dda3
SHA512 939a1a7583c3e4f6e549d2031c24eb593e73e03573683b638025d6c2c8dffcf3affdc63ef466f75b87cd2d675f5634cfcb895140f961ede501ec329e67fff4a8
SSDEEP 98304:5XbHjCO9LYEz0yllL57MxFHBaXSXeTdnHUjsel9IHxLq5GeuT6lHcUdT7ajSfuWf:JbHp0yllt72FsSy05+Rq26NcUtajk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MEVVEUJXK857AD7LB19EBWVGKD32.exe

File Explorer

MEVVEUJXK857AD7LB19EBWVGKD32.exe

.exe 13.1MB

MEVVEUJXK857AD7LB19EBWVGKD32.exe

IMPHASH a0831dc23f2c9459c6ad73f18d490ee8
SHA256 562dbca7396b224cd14176ab7b156586d166c7f622274ebdca159ce53cec84e6
MD5 c655ed0db252b31ca6c4b41d7ff9d616
SHA1 1ce0a77d5c073d03cd085a46e7594ebb8bc4dda3
SHA512 939a1a7583c3e4f6e549d2031c24eb593e73e03573683b638025d6c2c8dffcf3affdc63ef466f75b87cd2d675f5634cfcb895140f961ede501ec329e67fff4a8
SSDEEP 98304:5XbHjCO9LYEz0yllL57MxFHBaXSXeTdnHUjsel9IHxLq5GeuT6lHcUdT7ajSfuWf:JbHp0yllt72FsSy05+Rq26NcUtajk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6398132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\AdminC7\Workspace\1000398776\Project\Debug\Project.pdb

avrt

AvSetMmThreadCharacteristicsW AvSetMmMaxThreadCharacteristicsW AvRevertMmThreadCharacteristics AvSetMmThreadPriority AvRtCreateThreadOrderingGroup AvRtCreateThreadOrderingGroupExW AvRtJoinThreadOrderingGroup AvRtWaitOnThreadOrderingGroup AvRtLeaveThreadOrderingGroup AvRtDeleteThreadOrderingGroup AvQuerySystemResponsiveness

pdh

PdhBrowseCountersHW PdhBindInputDataSourceW PdhCollectQueryDataWithTime PdhCloseLog PdhBrowseCountersW PdhComputeCounterStatistics PdhCalculateCounterFromRawValue PdhCloseQuery PdhCollectQueryData PdhCollectQueryDataEx

kernel32

GetTimeFormatW SetStdHandle GetCommandLineW GetEnvironmentVariableW ExpandEnvironmentStringsW CreateFileW FindClose FindFirstFileExW FindNextFileW FlushFileBuffers GetFullPathNameW GetTempFileNameW ReadFile SetFileAttributesW SetFileInformationByHandle SetFilePointer SetFilePointerEx SetFileTime SetFileValidData UnlockFile UnlockFileEx WriteFile WriteFileEx WriteFileGather SetFileIoOverlappedRange AreFileApisANSI DebugBreak DebugActiveProcess DebugActiveProcessStop RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError SetNamedPipeHandleState TransactNamedPipe GetProcessHeap TryEnterCriticalSection ReleaseMutex SleepEx OpenMutexW OpenEventW SetWaitableTimer Sleep SignalObjectAndWait CreateSemaphoreW CreateWaitableTimerW GetCurrentProcess TerminateProcess SwitchToThread SetThreadPriority SetThreadPriorityBoost TerminateThread SuspendThread TlsAlloc TlsGetValue TlsSetValue TlsFree SetProcessShutdownParameters SetPriorityClass SetThreadContext SetProcessPriorityBoost SetThreadIdealProcessor GetSystemDirectoryW SetSystemTime SetSystemTimeAdjustment VirtualProtect OpenFileMappingW UnmapViewOfFile SetProcessWorkingSetSize UnregisterWaitEx CreateTimerQueue CreateTimerQueueTimer ReleaseMutexWhenCallbackReturns OpenJobObjectW AssignProcessToJobObject TerminateJobObject CompareStringW SizeofResource SetProcessAffinityMask SwitchToFiber SetThreadAffinityMask SetThreadExecutionState DebugSetProcessKillOnExit DebugBreakProcess SetMessageWaitingIndicator SetupComm TransmitCommChar SetTapePosition CreateTapePartition GetTapeStatus SetTapeParameters SetMailslotInfo OpenFile UpdateResourceW CopyFileW SetVolumeLabelA SetVolumeLabelW UnregisterWait SetTimerQueueTimer CancelTimerQueueTimer SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime SetTimeZoneInformation SetSystemPowerState SetVolumeMountPointA SetVolumeMountPointW DeactivateActCtx OpenFileById SetLocaleInfoA SetLocaleInfoW SetUserGeoID SetThreadLocale SetThreadUILanguage AttachConsole ReadConsoleInputW ReadConsoleW ReadConsoleOutputCharacterW ReadConsoleOutputAttribute WriteConsoleInputW ReadConsoleOutputW Toolhelp32ReadProcessMemory Thread32First Thread32Next GetDateFormatW InitializeCriticalSectionEx IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetTempPathW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW GetStringTypeW GetFileType SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage OutputDebugStringW GetCurrentThread GetModuleHandleExW ExitProcess GetStdHandle EncodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwind LoadLibraryExW InterlockedFlushSList InterlockedPushEntrySList GetProcAddress FreeLibrary VirtualQuery LCMapStringW SetConsoleCtrlHandler HeapSize HeapReAlloc GetConsoleOutputCP GetConsoleMode GetFileSizeEx CloseHandle WriteConsoleW GetModuleFileNameW HeapFree HeapAlloc WideCharToMultiByte MultiByteToWideChar GetModuleHandleW GetCurrentThreadId IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW DecodePointer

user32

wsprintfW OpenDesktopW OpenInputDesktop SetUserObjectInformationW ArrangeIconicWindows LoadIconW LoadCursorW SetWindowsHookExW SetWindowLongW FillRect ClientToScreen GetCursorPos MessageBoxW SetWindowTextW SetWindowRgn GetUpdateRect ReleaseDC DrawTextW SetMenuItemInfoW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetActiveWindow CharUpperW OpenClipboard SendDlgItemMessageW IsDlgButtonChecked CheckDlgButton GetDlgItemTextW GetDlgItem SetWindowPlacement SetWindowPos OpenIcon IsWindow RegisterClassW AttachThreadInput SendMessageW

gdi32

SetBrushOrgEx SetBitmapDimensionEx ArcTo SetColorAdjustment SetBoundsRect SetBitmapBits SetBkMode SetBkColor Arc

msvcrt

strchr wcschr strrchr memcmp

Name

.textbss

Size

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

12.2MB

Virtual Size

12.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

609KB

Virtual Size

609KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

209KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

MEVVEUJXK857AD7LB19EBWVGKD32.exe

avrt

pdh

kernel32

user32

gdi32

msvcrt

generic