AnimeAdventuresMacro[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AnimeAdventuresMacro.exe
Size 2.4MB
Sample261113-c233saey9v
SHA256 2d7aa5740309aa994a917c34da4f81fbfb2e5ee674ce07885b94127d73584a33
MD5 6277056fad797947076c9c0af2164da5
SHA1 e082946de68acc37d5fe484262965488dbe45061
SHA512 ae7b64ed3081efc261cae75ccfa414a38def0bcf17f7aa5e79b4810f461d442e59161e5ee12219d254959ff3ad9f6993c52a8baf974f4d60d7e43d9733d5d8db
SSDEEP 49152:6DffHR1vkLiovdryiK3/L0TBKE97XtYWEQ0Vd+paou/WfMoDryGX:6TkLRdrMLEpgQd
TLSH
T149C5E00373E6C1E8DA7781F5C9565623EB31B8641B388ADF2550512EDFA3BD04E3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnimeAdventuresMacro.exe

File Explorer

AnimeAdventuresMacro.exe

.exe 2.4MB

AnimeAdventuresMacro.exe

IMPHASH bc822e4d86708bab3f4ee2bcf9286cbc
SHA256 2d7aa5740309aa994a917c34da4f81fbfb2e5ee674ce07885b94127d73584a33
MD5 6277056fad797947076c9c0af2164da5
SHA1 e082946de68acc37d5fe484262965488dbe45061
SHA512 ae7b64ed3081efc261cae75ccfa414a38def0bcf17f7aa5e79b4810f461d442e59161e5ee12219d254959ff3ad9f6993c52a8baf974f4d60d7e43d9733d5d8db
SSDEEP 49152:6DffHR1vkLiovdryiK3/L0TBKE97XtYWEQ0Vd+paou/WfMoDryGX:6TkLRdrMLEpgQd
TLSH
T149C5E00373E6C1E8DA7781F5C9565623EB31B8641B388ADF2550512EDFA3BD04E3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14764

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDecrypt BCryptDestroyHash BCryptDestroyKey BCryptFinishHash BCryptGenRandom BCryptGenerateSymmetricKey BCryptGetProperty BCryptHashData BCryptOpenAlgorithmProvider BCryptSetProperty

cabinet

CloseDecompressor CreateDecompressor Decompress

user32

MessageBoxW

shell32

CommandLineToArgvW

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-private-l1-1-0

wcsrchr wcsstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___wargv __p__wcmdln _cexit _configure_wide_argv _crt_atexit _exit _initialize_wide_environment _initterm _initterm_e _seh_filter_exe _set_app_type _set_invalid_parameter_handler abort exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vswprintf fflush fwrite setvbuf

api-ms-win-crt-string-l1-1-0

wcscat wcscmp wcscpy wcslen

kernel32

AssignProcessToJobObject CloseHandle CreateDirectoryW CreateFileW CreateJobObjectW CreatePipe CreateProcessW DeleteCriticalSection DeleteFileW EnterCriticalSection FindResourceW FlushFileBuffers GetCommandLineW GetCurrentProcess GetCurrentProcessId GetEnvironmentVariableW GetExitCodeProcess GetFileSizeEx GetFileType GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleW GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadResource LocalFree LockResource MoveFileExW ReadFile RemoveDirectoryW ResumeThread SetEnvironmentVariableW SetHandleInformation SetInformationJobObject SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__wenviron

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

AnimeAdventuresMacro.exe

bcrypt

cabinet

user32

shell32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic