amoeqhwt[.]exe | Triage™

General

Target
amoeqhwt.exe
Size 11.4MB
Sample240917-mnwrnaydkp
SHA256 80179046df92d795c3ab0655f61a3c24387dcb628f00e7b64871c446cdf65cd7
MD5 ae72e9f1f7a1fdf37a9864edd5a1b0d7
SHA1 bd20ac8ebfb5eef418868fb0905a0bcf2aef73c0
SHA512 db3f33dc248f9aa3cd7ba7cde1a564491f60368043b9832410e73ac17b51d271bb5fb9c4b64819b5537578e9c9ecfe46b6dd438777072814cf238fe635b77294
SSDEEP 12288:GtfqkWH3ZIQqcggggggggggggggggggggggggggggggggggggggggggggggggggI:GY1HpLq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
amoeqhwt.exe

File Explorer

amoeqhwt.exe

.exe 11.4MB

amoeqhwt.exe

IMPHASH 64844bd5bbea5ab39e782122c19db725
SHA256 80179046df92d795c3ab0655f61a3c24387dcb628f00e7b64871c446cdf65cd7
MD5 ae72e9f1f7a1fdf37a9864edd5a1b0d7
SHA1 bd20ac8ebfb5eef418868fb0905a0bcf2aef73c0
SHA512 db3f33dc248f9aa3cd7ba7cde1a564491f60368043b9832410e73ac17b51d271bb5fb9c4b64819b5537578e9c9ecfe46b6dd438777072814cf238fe635b77294
SSDEEP 12288:GtfqkWH3ZIQqcggggggggggggggggggggggggggggggggggggggggggggggggggI:GY1HpLq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24743

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cujame53\daxexu\totawo9_xizokejoji dadesobo_j.pdb

kernel32

GetModuleFileNameA WriteConsoleInputW ReadConsoleInputA GetSystemDirectoryA WriteConsoleW WaitNamedPipeA BuildCommDCBA InterlockedDecrement BeginUpdateResourceA CancelTimerQueueTimer GetCPInfoExW GetConsoleAliasExesLengthW EnumTimeFormatsA CopyFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthA GlobalAlloc GetProcAddress GetUserDefaultLCID CancelWaitableTimer UnhandledExceptionFilter SizeofResource EndUpdateResourceA GetPrivateProfileIntW EnumResourceNamesA GlobalReAlloc SetFileAttributesW AreFileApisANSI GetCurrentDirectoryW GetAtomNameA GetFileAttributesA SetConsoleTitleW VerSetConditionMask SetProcessWorkingSetSize GetLongPathNameW GetLastError GetSystemDefaultLangID GetConsoleProcessList PurgeComm BuildCommDCBAndTimeoutsA OpenJobObjectA InitializeCriticalSectionAndSpinCount FindResourceExA EnumCalendarInfoExW GetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesW GlobalMemoryStatusEx ReadConsoleOutputAttribute GetCPInfoExA CreateFileW LoadLibraryW GetSystemWindowsDirectoryA HeapReAlloc HeapFree HeapAlloc EncodePointer DecodePointer RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection HeapCreate GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW Sleep HeapSize GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId WideCharToMultiByte GetConsoleCP FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException SetStdHandle LCMapStringW MultiByteToWideChar GetStringTypeW FlushFileBuffers CloseHandle

user32

ClientToScreen

advapi32

AreAnyAccessesGranted

winhttp

WinHttpCloseHandle

Sharing