Avaddon_09_06_2020_1054KB[.]exe

Resubmissions

15/06/2025, 23:49

250615-3t63kswtfs

15/06/2025, 23:46

250615-3sfh8sslw410

Sharing

Copy URL Twitter E-mail

General

Target
Avaddon_09_06_2020_1054KB.exe
Size 1.0MB
Sample250615-3t63kswtfs
SHA256 05af0cf40590aef24b28fa04c6b4998b7ab3b7f26e60c507adb84f3d837778f2
MD5 c9ec0d9ff44f445ce5614cc87398b38d
SHA1 591ffe54bac2c50af61737a28749ff8435168182
SHA512 c340baeb66fc46830b6b77b2583033ade6e10b3de04d82ece7e241107afe741442585bf2ea9d6496af93143c37e9676d4f1e1d301d55632b88b12daadadd43f0
SSDEEP 24576:Cs6JmdFn5KLOCgHWcAvcrOcEsKfR9uA7rmFbbbbpccf:Cs6JY5KLOCyWcDUfRAA3mFbbbbpc4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Avaddon_09_06_2020_1054KB.exe

File Explorer

Avaddon_09_06_2020_1054KB.exe

.exe 1.0MB

Avaddon_09_06_2020_1054KB.exe

IMPHASH 1156e59d43883136ef73eee451e94e3d
SHA256 05af0cf40590aef24b28fa04c6b4998b7ab3b7f26e60c507adb84f3d837778f2
MD5 c9ec0d9ff44f445ce5614cc87398b38d
SHA1 591ffe54bac2c50af61737a28749ff8435168182
SHA512 c340baeb66fc46830b6b77b2583033ade6e10b3de04d82ece7e241107afe741442585bf2ea9d6496af93143c37e9676d4f1e1d301d55632b88b12daadadd43f0
SSDEEP 24576:Cs6JmdFn5KLOCgHWcAvcrOcEsKfR9uA7rmFbbbbpccf:Cs6JY5KLOCyWcDUfRAA3mFbbbbpc4
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

295367

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetFileSizeEx GetFileAttributesW SetFileAttributesW SetFilePointerEx MoveFileExW FindFirstFileW FindNextFileW GetEnvironmentVariableW FindClose GetShortPathNameA ReleaseMutex GetUserDefaultLCID GetCurrentThread GetThreadContext IsDebuggerPresent QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList GetCurrentProcess GetTickCount OpenMutexW CopyFileW CreateProcessW GetProcessHeap HeapAlloc CloseHandle Process32FirstW Process32NextW GetLastError Sleep CreateToolhelp32Snapshot OpenProcess CreateFileW CreateMutexW GetModuleFileNameW TerminateProcess HeapFree WideCharToMultiByte MultiByteToWideChar FindNextVolumeW GetVolumePathNamesForVolumeNameW FindVolumeClose SetVolumeMountPointW FindFirstVolumeW WriteConsoleW SetEndOfFile HeapSize ReadConsoleW FlushFileBuffers SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP ReleaseSemaphore DuplicateHandle VirtualFree VirtualProtect VirtualAlloc IsValidCodePage GetVersionExW LoadLibraryExW GetModuleHandleA FreeLibraryAndExitThread UnregisterWaitEx WaitForSingleObject WriteFile FindFirstFileExW HeapReAlloc GetConsoleMode GetConsoleCP SetStdHandle DeleteFileW GetFileType EnumSystemLocalesW IsValidLocale GetTimeFormatW GetDateFormatW GetTimeZoneInformation QueryDosDeviceW GetLogicalDrives GetStdHandle FreeLibrary ExitProcess RtlUnwind LoadLibraryW RaiseException GetCurrentThreadId IsProcessorFeaturePresent QueueUserWorkItem GetModuleHandleExW FormatMessageW EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WaitForSingleObjectEx EncodePointer DecodePointer GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetEvent ResetEvent GetStartupInfoW GetCurrentProcessId InitializeSListHead LocalFree CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes

user32

GetKeyboardLayout SystemParametersInfoW

advapi32

ControlService OpenServiceW CryptSetKeyParam CryptDestroyKey CryptAcquireContextW CryptEncrypt CryptDuplicateKey CryptExportKey CryptImportKey CryptGenKey CryptReleaseContext OpenProcessToken GetTokenInformation RegCloseKey CloseServiceHandle OpenSCManagerW DeleteService RegCreateKeyW EnumDependentServicesW RegSetValueExW StartServiceW RegOpenKeyExW QueryServiceStatusEx

shell32

SHGetSpecialFolderPathA SHEmptyRecycleBinW

ole32

CoUninitialize CoInitializeEx CoInitialize IIDFromString CLSIDFromString CoGetObject CoCreateInstance CoInitializeSecurity

oleaut32

SysFreeString VariantInit SysAllocStringByteLen SysAllocString VariantClear SysStringByteLen

mpr

WNetGetConnectionW

netapi32

NetShareEnum NetApiBufferFree

iphlpapi

SendARP

ws2_32

WSACleanup gethostbyname WSAStartup inet_addr gethostname inet_ntoa

rstrtmgr

RmRegisterResources RmGetList RmStartSession RmShutdown RmEndSession

crypt32

CryptStringToBinaryA

wininet

InternetConnectW HttpOpenRequestW InternetCloseHandle HttpSendRequestW InternetReadFile HttpSendRequestA InternetOpenW