LEEQEZ PREMIUM TWEAKING UTILITY[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
LEEQEZ PREMIUM TWEAKING UTILITY.exe
Size 79KB
Sample260621-xtdhdafx5x
SHA256 c4f1244546720ccc5cc91be16c6991a50031e3cf5b1c1178b9ecde561a900295
MD5 9f515ab9c394c3b3c0c7d260a16d6dca
SHA1 c23b93438d003c7c834e96c57369873bac98db14
SHA512 96f56eabadbb2395c3713fa6c13ebbad4f199af721e9ba3d67751f859784b7feed825737253d1714a43e891c925b7628b53b17478345aa2a9fc50db97d312382
SSDEEP 1536:CwVKAj6aCjrenJYdOBvnUlZEyvxTBv5+VGBHhP:ZK26jnenOOB/Ulmyv/v4MHhP
TLSH
T19183291ABD2000A9F156F6B9EAE7490ED773B84583A253CBA7A4A3710F171C42D3FD52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LEEQEZ PREMIUM TWEAKING UTILITY.exe

File Explorer

LEEQEZ PREMIUM TWEAKING UTILITY.exe

.exe .vbs 79KB

LEEQEZ PREMIUM TWEAKING UTILITY.exe

IMPHASH 9d46c6cb5095f7c41e9f6b3ce069f7af
SHA256 c4f1244546720ccc5cc91be16c6991a50031e3cf5b1c1178b9ecde561a900295
MD5 9f515ab9c394c3b3c0c7d260a16d6dca
SHA1 c23b93438d003c7c834e96c57369873bac98db14
SHA512 96f56eabadbb2395c3713fa6c13ebbad4f199af721e9ba3d67751f859784b7feed825737253d1714a43e891c925b7628b53b17478345aa2a9fc50db97d312382
SSDEEP 1536:CwVKAj6aCjrenJYdOBvnUlZEyvxTBv5+VGBHhP:ZK26jnenOOB/Ulmyv/v4MHhP
TLSH
T19183291ABD2000A9F156F6B9EAE7490ED773B84583A253CBA7A4A3710F171C42D3FD52
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\GGJUL\source\repos\Feavr Solutions\x64\Release\LEEQEZ PREMIUM TWEAKING UTILITY.pdb

kernel32

CloseHandle GetModuleFileNameW FormatMessageA GetLocaleInfoEx GetCurrentProcess GetConsoleWindow Sleep SetConsoleTitleA FindClose FindFirstFileW GetFileAttributesW GetFileAttributesExW GetTempPathW CreateFile2 AreFileApisANSI GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter LocalFree

user32

ShowWindow

advapi32

GetTokenInformation OpenProcessToken

msvcp140

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?good@ios_base@std@@QEBA_NXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ _Query_perf_frequency ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z _Query_perf_counter ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??Bios_base@std@@QEBA_NXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy __std_exception_destroy memset _CxxThrowException __C_specific_handler __current_exception_context __current_exception __std_terminate __std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__p__commode _get_stream_buffer_pointers _fseeki64 fread fsetpos ungetc setvbuf fgetpos fwrite fputc fgetc fclose fflush _set_fmode

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _register_thread_local_exe_atexit_callback _c_exit __p___argv __p___argc abort _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _crt_atexit _set_app_type _seh_filter_exe terminate system _cexit

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-string-l1-1-0

wcslen strlen