HystericBirthday[.]exe

General

Target
HystericBirthday.exe
Size 4.1MB
Sample260802-vja86axcja
SHA256 77c678df12411c3d7cc67c2971be72913df85cafd05e5bd78c1b8cf84b508301
MD5 4c1a3beaf60944ba1f42613374064ac1
SHA1 bbc8ab62d3f42e6aa0c68d6934c3ae21a31ff972
SHA512 ac55fc87985082e229b77d6ed09ae3d48c4c1e123f0ee27bcadd01a4f967d0960237223a657925e826073b17be884c9be1345447b7795e5791cc8e154e78b893
SSDEEP 49152:N7FkW6Zril0QLZxU+UdmaYsBRmUVh+ilpST26Tc346Ez0tuHIBpwP218MBSHItuL:N7FkWstQNxU+U4aYsBRmKZ4Y3gLR
TLSH
T16D1619FC7140A657F0C404B16BE9EA90A9663DA98B35179329933FF61470EB676E3303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HystericBirthday.exe

File Explorer

HystericBirthday.exe

.exe 4.1MB

HystericBirthday.exe

IMPHASH 8da4401947d8541eb180f2a8299e2eeb
SHA256 77c678df12411c3d7cc67c2971be72913df85cafd05e5bd78c1b8cf84b508301
MD5 4c1a3beaf60944ba1f42613374064ac1
SHA1 bbc8ab62d3f42e6aa0c68d6934c3ae21a31ff972
SHA512 ac55fc87985082e229b77d6ed09ae3d48c4c1e123f0ee27bcadd01a4f967d0960237223a657925e826073b17be884c9be1345447b7795e5791cc8e154e78b893
SSDEEP 49152:N7FkW6Zril0QLZxU+UdmaYsBRmUVh+ilpST26Tc346Ez0tuHIBpwP218MBSHItuL:N7FkWstQNxU+U4aYsBRmKZ4Y3gLR
TLSH
T16D1619FC7140A657F0C404B16BE9EA90A9663DA98B35179329933FF61470EB676E3303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1551563

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

n:\CorpseBoS\src_bos\src\Release2U\HystericBirthday.pdb

kernel32

CreateFileA GetCurrentProcess GetLastError GetModuleFileNameA GetModuleHandleA IsDebuggerPresent GetCurrentThreadId CloseHandle GetCurrentProcessId GetSystemTime GetPrivateProfileIntA GetPrivateProfileStringA WritePrivateProfileStringA VerSetConditionMask Sleep VerifyVersionInfoW GetStdHandle SetConsoleTextAttribute CompareStringW CompareStringA GetProcessHeap SetEndOfFile GetLocaleInfoW LocalAlloc GetProcAddress FreeLibrary InterlockedExchange LoadLibraryA RaiseException LoadLibraryW MultiByteToWideChar ExitProcess InterlockedIncrement InterlockedDecrement WideCharToMultiByte InterlockedCompareExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateDirectoryA GetModuleHandleW HeapFree SetStdHandle GetFileType GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapAlloc HeapReAlloc RtlUnwind GetCPInfo LCMapStringA LCMapStringW GetStringTypeW WriteFile GetConsoleCP GetConsoleMode TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA InitializeCriticalSectionAndSpinCount HeapCreate VirtualFree VirtualAlloc SetHandleCount HeapSize GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount SetFilePointer ReadFile FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA

user32

LoadIconA MessageBoxW

dbghelp

MiniDumpWriteDump

Sharing