AnimeAdventuresMacro[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AnimeAdventuresMacro.exe
Size 2.4MB
Sample261107-spesesfc44
SHA256 70918ad75f8a91c20c80ddb9d83159839f366bd1a74b0fd96bcd81bc7a0ac5a2
MD5 210a7063111493ec4f161c588d7f0fc6
SHA1 cc68663ec6e6f62b5d68f28529344a663ae79195
SHA512 d394b7071ec8acdda52c01b9ac7e99325d066fdc27d8d47ee6fc83d289263a00ca8d0c757b4b08a880200baa967392ba9ed16ca6838a15ef33c9ce2f2c783bbd
SSDEEP 49152:ZDfffR1vk5Q6hWh0Ei3hA2E97XtYWEQ0Vd+paou/WfMoDryGX:ZjaIqEIh0pgQd
TLSH
T1ABC5E10373E6C1E8DA7781F5C5665622EB31B8641B388ADF2150952EDFB3BD04E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnimeAdventuresMacro.exe

File Explorer

AnimeAdventuresMacro.exe

.exe 2.4MB

AnimeAdventuresMacro.exe

IMPHASH bc822e4d86708bab3f4ee2bcf9286cbc
SHA256 70918ad75f8a91c20c80ddb9d83159839f366bd1a74b0fd96bcd81bc7a0ac5a2
MD5 210a7063111493ec4f161c588d7f0fc6
SHA1 cc68663ec6e6f62b5d68f28529344a663ae79195
SHA512 d394b7071ec8acdda52c01b9ac7e99325d066fdc27d8d47ee6fc83d289263a00ca8d0c757b4b08a880200baa967392ba9ed16ca6838a15ef33c9ce2f2c783bbd
SSDEEP 49152:ZDfffR1vk5Q6hWh0Ei3hA2E97XtYWEQ0Vd+paou/WfMoDryGX:ZjaIqEIh0pgQd
TLSH
T1ABC5E10373E6C1E8DA7781F5C5665622EB31B8641B388ADF2150952EDFB3BD04E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14764

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDecrypt BCryptDestroyHash BCryptDestroyKey BCryptFinishHash BCryptGenRandom BCryptGenerateSymmetricKey BCryptGetProperty BCryptHashData BCryptOpenAlgorithmProvider BCryptSetProperty

cabinet

CloseDecompressor CreateDecompressor Decompress

user32

MessageBoxW

shell32

CommandLineToArgvW

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-private-l1-1-0

wcsrchr wcsstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___wargv __p__wcmdln _cexit _configure_wide_argv _crt_atexit _exit _initialize_wide_environment _initterm _initterm_e _seh_filter_exe _set_app_type _set_invalid_parameter_handler abort exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vswprintf fflush fwrite setvbuf

api-ms-win-crt-string-l1-1-0

wcscat wcscmp wcscpy wcslen

kernel32

AssignProcessToJobObject CloseHandle CreateDirectoryW CreateFileW CreateJobObjectW CreatePipe CreateProcessW DeleteCriticalSection DeleteFileW EnterCriticalSection FindResourceW FlushFileBuffers GetCommandLineW GetCurrentProcess GetCurrentProcessId GetEnvironmentVariableW GetExitCodeProcess GetFileSizeEx GetFileType GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleW GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadResource LocalFree LockResource MoveFileExW ReadFile RemoveDirectoryW ResumeThread SetEnvironmentVariableW SetHandleInformation SetInformationJobObject SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__wenviron

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

AnimeAdventuresMacro.exe

bcrypt

cabinet

user32

shell32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic