vekvtia[.]exe | Triage™

General

Target
vekvtia.exe
Size 10.5MB
Sample240903-vefcbasfjb
SHA256 21a5e8cf356706a639eee50ea97cecef91685eb906921245c314ac50950b9825
MD5 274d0ab4368246be7f22990d9d5cb4cf
SHA1 d34547e852863893aef034effc726bf2ee227d02
SHA512 dab676f30f08c6719e26cc376c89803a14d89adf50c6ee31d941f724b3dae03ca1cce950a3dd7651e3ed5f40323b021c875cdd1dfbbba9952cd417d7a3f90e81
SSDEEP 6144:Sc6OZDisWsD0Td2HJxO+m8PuG1R4WnWjrsaz:S1OZDisvwdaxO0PuG1R4CWs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vekvtia.exe

File Explorer

vekvtia.exe

.exe 10.5MB

vekvtia.exe

IMPHASH 526678b0f88b7214e779e54df5f3d8dd
SHA256 21a5e8cf356706a639eee50ea97cecef91685eb906921245c314ac50950b9825
MD5 274d0ab4368246be7f22990d9d5cb4cf
SHA1 d34547e852863893aef034effc726bf2ee227d02
SHA512 dab676f30f08c6719e26cc376c89803a14d89adf50c6ee31d941f724b3dae03ca1cce950a3dd7651e3ed5f40323b021c875cdd1dfbbba9952cd417d7a3f90e81
SSDEEP 6144:Sc6OZDisWsD0Td2HJxO+m8PuG1R4WnWjrsaz:S1OZDisvwdaxO0PuG1R4CWs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW CreateJobObjectW InterlockedCompareExchange UnlockFile CreateHardLinkA GetTickCount CreateNamedPipeW FindNextVolumeMountPointA SetCommState GlobalAlloc LoadLibraryW GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost VerifyVersionInfoW GetLogicalDriveStringsA SetLastError GetProcAddress GetConsoleDisplayMode GetProcessVersion InterlockedExchangeAdd CreateFileMappingW SetDefaultCommConfigW CreateEventW OpenEventA GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect GetCurrentDirectoryA WaitForDebugEvent PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW GetTempPathA EnumCalendarInfoExA LocalFree TlsFree LCMapStringW CommConfigDialogW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP GetCurrentProcess SetEndOfFile GetConsoleAliasExesA GetNumberFormatW GetLocaleInfoA MultiByteToWideChar GetLastError HeapFree HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId HeapAlloc IsProcessorFeaturePresent HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetStringTypeW RaiseException SetFilePointer SetStdHandle RtlUnwind HeapSize CreateFileW

user32

DrawStateA LoadMenuW CharUpperW GetSysColor GetMenuStringA GetCaretPos SetMenu

gdi32

GetCharWidthFloatA CreateDCW GetCharWidth32A GetBitmapBits

Sharing