1622ac3fa3cf29bf[.]exe

General

Target
1622ac3fa3cf29bf.exe
Size 224KB
Sample260323-cs6gjsdv4q
SHA256 1622ac3fa3cf29bf8f3e87b81bb0c17655a513b4d038b12eedc15e1c2eeb357f
MD5 5f2f05050bd0c9395997d5d98b0faaec
SHA1 c3ba70c8c58cc8334434d79b1cfb2c01ae8cd2b6
SHA512 9ad57628c26ed158935ce8d7626b3aa3d67b1653a9951daf07b925de43af2e5810f74da38b9a6492777f7d9ae903533d20b840ebb2e459760e80cd38a0d33c6b
SSDEEP 6144:ayC2zi7aDccGLKZH2FaLw9hH4JdBV+UdvrEFp7hK3oc:ayC2zi+D89hH4JdBjvrEH73c
TLSH
T1CC24CF4079C0C3F6E4B228303574AB705EECFC3C0F665AAB974515699E3C5D29A68F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1622ac3fa3cf29bf.exe

File Explorer

1622ac3fa3cf29bf.exe

.exe 224KB

1622ac3fa3cf29bf.exe

IMPHASH 23b9079896617a8a01351c21a6caa337
SHA256 1622ac3fa3cf29bf8f3e87b81bb0c17655a513b4d038b12eedc15e1c2eeb357f
MD5 5f2f05050bd0c9395997d5d98b0faaec
SHA1 c3ba70c8c58cc8334434d79b1cfb2c01ae8cd2b6
SHA512 9ad57628c26ed158935ce8d7626b3aa3d67b1653a9951daf07b925de43af2e5810f74da38b9a6492777f7d9ae903533d20b840ebb2e459760e80cd38a0d33c6b
SSDEEP 6144:ayC2zi7aDccGLKZH2FaLw9hH4JdBV+UdvrEFp7hK3oc:ayC2zi+D89hH4JdBjvrEH73c
TLSH
T1CC24CF4079C0C3F6E4B228303574AB705EECFC3C0F665AAB974515699E3C5D29A68F2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

13305

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\Ventoy\Vlnk\vs\VentoyVlnk\Release\VentoyVlnk.pdb

kernel32

ReadFile GetLogicalDrives GetFileSizeEx GetCommandLineW lstrlenW WriteFile DeviceIoControl LoadLibraryExA GetUserDefaultUILanguage CreateMutexA GetVolumeInformationA CreateFileW GetFileAttributesW GetCurrentDirectoryA MultiByteToWideChar GetLastError CreateFileA SetDllDirectoryA CloseHandle LoadLibraryW GetCurrentDirectoryW GetProcAddress WideCharToMultiByte lstrcmpW DecodePointer SetEndOfFile ReadConsoleW HeapReAlloc HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx RaiseException GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType GetTimeZoneInformation CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap WriteConsoleW

user32

EndDialog SetWindowTextW MessageBoxW LoadIconW GetDlgItem EnableWindow DialogBoxParamA SendMessageW

Sharing