undetek-v10[.]36[.]exe

General

Target
undetek-v10.36.exe
Size 247KB
Sample260603-e5v8fsht6t
SHA256 c662fc1395f1592c80a76ecd857dda4107ad98f513378e3b4b559a155b44e2c3
MD5 3c17816762f24a88a092e978527a88ea
SHA1 1251e12eef9e6243932bf01a81196b37b2166411
SHA512 aee495c1f8a065fbecd3bc0c220abb5b7e6f7fac947aebaf4928cdcef037057231c03739f33012ebe4c0d2408e114f171e3e1d4e9b9f780a7bfd5ae3236b08c9
SSDEEP 6144:X9483Cl/203hSgN2TKyd92r9s1zLGOya:X9483053hSgoTDdc9u
TLSH
T1E044390A77A994F5D4B2D639C94229BAF6B1BC05837193DF03903927AF336E1D839391
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
undetek-v10.36.exe

File Explorer

undetek-v10.36.exe

.exe 247KB

undetek-v10.36.exe

IMPHASH 96f0a629988571a51f50bbbdf2805812
SHA256 c662fc1395f1592c80a76ecd857dda4107ad98f513378e3b4b559a155b44e2c3
MD5 3c17816762f24a88a092e978527a88ea
SHA1 1251e12eef9e6243932bf01a81196b37b2166411
SHA512 aee495c1f8a065fbecd3bc0c220abb5b7e6f7fac947aebaf4928cdcef037057231c03739f33012ebe4c0d2408e114f171e3e1d4e9b9f780a7bfd5ae3236b08c9
SSDEEP 6144:X9483Cl/203hSgN2TKyd92r9s1zLGOya:X9483053hSgoTDdc9u
TLSH
T1E044390A77A994F5D4B2D639C94229BAF6B1BC05837193DF03903927AF336E1D839391
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

42996

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadProcessMemory WriteProcessMemory GetModuleHandleA GetProcAddress CreateToolhelp32Snapshot VirtualProtectEx Process32Next WriteConsoleW CreateFileW HeapReAlloc HeapSize VirtualAllocEx GetTickCount64 OpenProcess CreateRemoteThread Sleep WaitForSingleObject GetLastError Process32First CloseHandle SetFilePointerEx GetFileSizeEx ReadConsoleW ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW SetStdHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RtlUnwind

user32

GetAsyncKeyState SendInput

advapi32

RegSetValueExA RegQueryValueExA RegOpenKeyExW RegOpenKeyExA RegDeleteKeyA RegCreateKeyExA RegCloseKey RegSetValueExW

ws2_32

socket WSAGetLastError recv connect closesocket WSAStartup WSACleanup freeaddrinfo getaddrinfo send

Resubmissions

Sharing