Vyron[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Vyron.exe
Size 229KB
Sample260905-a2bmesz1dv
SHA256 9ba173864436d686b57ea5b4631a7478d6982e62d1934a2ebd857063a55555e4
MD5 8d4d21c930f4373c2df6added0f52012
SHA1 28a2f23b8e0e6c4e78ddfcf3b34c418c05193de3
SHA512 91aa6457a743934bb113889054fc2fe96a723d0202ff47c0988ccf1f45e9e529784b58a15f37623a95070f8aa1b1ef7a3bbf20e15cb0a8b012018937a6a33f16
SSDEEP 3072:p6a7dNNPBxehgEfYzPGpw+hcRjYJ5r92phU+2WoGKrSJs+9rYBwah0FIUGy3SzFi:p6aE+KV9WNJoFrSJsgrYe0cIK26m
TLSH
T1F7346B11BB928C32EA66073445A49F76B93BAD214B71BCC767903EA9483C1C35F36E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vyron.exe

File Explorer

Vyron.exe

.exe 229KB

Vyron.exe

IMPHASH 22748a537ceba06e2f7159d6a99484d0
SHA256 9ba173864436d686b57ea5b4631a7478d6982e62d1934a2ebd857063a55555e4
MD5 8d4d21c930f4373c2df6added0f52012
SHA1 28a2f23b8e0e6c4e78ddfcf3b34c418c05193de3
SHA512 91aa6457a743934bb113889054fc2fe96a723d0202ff47c0988ccf1f45e9e529784b58a15f37623a95070f8aa1b1ef7a3bbf20e15cb0a8b012018937a6a33f16
SSDEEP 3072:p6a7dNNPBxehgEfYzPGpw+hcRjYJ5r92phU+2WoGKrSJs+9rYBwah0FIUGy3SzFi:p6aE+KV9WNJoFrSJsgrYe0cIK26m
TLSH
T1F7346B11BB928C32EA66073445A49F76B93BAD214B71BCC767903EA9483C1C35F36E17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

BeginPaint GetCursorPos SendInput EndPaint IsIconic InvalidateRect SetForegroundWindow UpdateWindow PtInRect PostQuitMessage KillTimer GetKeyNameTextW PostThreadMessageW DrawTextW GetClientRect SetCursor SetWindowsHookExW LoadCursorW GetWindowLongW GetMessageW DefWindowProcW PostMessageW MapVirtualKeyW GetWindowRect DestroyWindow InflateRect IsWindowVisible MessageBoxW SetWindowRgn FillRect CreateWindowExW ScreenToClient SendMessageW CallNextHookEx GetSystemMetrics UnregisterClassW SetWindowTextW RegisterClassExW ShowWindow IsWindow GetAsyncKeyState OffsetRect DispatchMessageW SetTimer PeekMessageW TrackMouseEvent GetForegroundWindow UnhookWindowsHookEx SetFocus TranslateMessage GetWindowTextW

gdi32

BitBlt CreateCompatibleBitmap SaveDC SelectObject CreateDIBSection CreateCompatibleDC CreateFontW GetStockObject CreateRoundRectRgn DeleteDC GetTextExtentPoint32W SetTextColor SetBkMode LineTo CreatePen SelectClipRgn SetDCBrushColor MoveToEx SetBkColor Ellipse RestoreDC DeleteObject CreateSolidBrush RoundRect SetDCPenColor IntersectClipRect

dwmapi

DwmExtendFrameIntoClientArea

winhttp

WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpCrackUrl WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpReceiveResponse WinHttpSetOption WinHttpReadData WinHttpQueryHeaders WinHttpOpen

winmm

PlaySoundW

shell32

ShellExecuteW ShellExecuteExW

advapi32

CryptDestroyHash RegCloseKey CryptAcquireContextW CryptCreateHash CryptHashData CryptReleaseContext RegOpenKeyExW CryptGetHashParam RegQueryValueExW

msimg32

AlphaBlend

kernel32

HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent GetStdHandle TerminateProcess ExitProcess GetCurrentProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread DeleteCriticalSection VirtualProtect LoadLibraryExW LCMapStringW GetFileType SetFilePointerEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter IsProcessorFeaturePresent SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc DecodePointer FindNextFileW GetSystemTimePreciseAsFileTime SleepConditionVariableSRW CreateDirectoryW ReadFile SetNamedPipeHandleState CompareFileTime FindFirstFileW WaitNamedPipeA SetWaitableTimer WriteConsoleW WriteFile GetModuleFileNameW WaitForMultipleObjects SetThreadPriority GetEnvironmentVariableW PeekNamedPipe FindClose WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId CancelWaitableTimer CreateEventW MultiByteToWideChar Sleep GetTickCount64 GetLastError CreateFileA SetEvent GetCurrentThread QueryPerformanceFrequency DeleteFileW CloseHandle LoadLibraryW GetProcAddress GetFileSize GetCurrentProcessId GetModuleHandleW FreeLibrary WideCharToMultiByte CreateWaitableTimerExW QueryPerformanceCounter WaitForSingleObjectEx GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable