dvnx_e5b790c3_unpacked[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dvnx_e5b790c3_unpacked.exe
Size 617KB
Sample261017-bzvsysvsas
SHA256 8351041a32a2c892ab9349120616870b5095d05752f4d3e355d8158c2bc02cbd
MD5 455b03cc8c12e32499877f00b9146e3b
SHA1 2dcf41701a5819a318491e8420d63b36021328ce
SHA512 25e6925af85bc9e4d2e5423996176a8aea5ad98c8b35c30606795e1da0ebd167a5cdd97dbf04bee15e7ef34d8df72c51603f3946c264f5daf35d24902aa573ee
SSDEEP 12288:zA+D8cAENGp94gfRUDJpFFB0k3CPC1B+Hu5Lpbg5Wtj9iPqK:zAwhGggCJpFok3CPZu5LXdyqK
TLSH
T1ACD44B53F3A146DCD42AC9B5832A9133E6757C8C4630B67B67946F211F3ABA0EB2D704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dvnx_e5b790c3_unpacked.exe

File Explorer

dvnx_e5b790c3_unpacked.exe

.dll 617KB

dvnx_e5b790c3_unpacked.exe

IMPHASH 4f3beab9d6def07c37d6a08235d6c43a
SHA256 8351041a32a2c892ab9349120616870b5095d05752f4d3e355d8158c2bc02cbd
MD5 455b03cc8c12e32499877f00b9146e3b
SHA1 2dcf41701a5819a318491e8420d63b36021328ce
SHA512 25e6925af85bc9e4d2e5423996176a8aea5ad98c8b35c30606795e1da0ebd167a5cdd97dbf04bee15e7ef34d8df72c51603f3946c264f5daf35d24902aa573ee
SSDEEP 12288:zA+D8cAENGp94gfRUDJpFFB0k3CPC1B+Hu5Lpbg5Wtj9iPqK:zAwhGggCJpFok3CPZu5LXdyqK
TLSH
T1ACD44B53F3A146DCD42AC9B5832A9133E6757C8C4630B67B67946F211F3ABA0EB2D704
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

499632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CompareStringA CompareStringW CreateFileW CreateThread CreateWaitableTimerExW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileAttributesA GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTime GetSystemTimeAsFileTime GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsThreadAFiber IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetFilePointerEx SetFileTime SetLastError SetStdHandle SetUnhandledExceptionFilter SetWaitableTimer Sleep SwitchToThread TerminateProcess UnhandledExceptionFilter VirtualProtect WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile lstrlenA lstrlenW

user32

GetActiveWindow GetWindowRect GetWindowThreadProcessId

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ntdll

NtReadFile

Name

.text

Size

491KB

Virtual Size

491KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

737B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dvnx_e5b790c3_unpacked.exe

kernel32

user32

api-ms-win-core-synch-l1-2-0

ntdll

generic