KMT Client v6[.]2[.]exe

General

Target
KMT Client v6.2.exe
Size 7.9MB
Sample260703-ty57eacy51
SHA256 608e942f136306534c03bc930528c31a07d6cc0b5fe5633356fdf6ac7701fa11
MD5 8bd847fd20ed35e4ea0bc5cb123cf312
SHA1 6d4faa15cd1c1a8549a65f3d38dcc7d95657ec8a
SHA512 4ce4c86a214e56a70e1c9bbcdfe5db406fe60655d25c7e2c75d571b462810c2e3216dcef06bdc2b783c36560f18e9a87c7a1c892e496c6b91ee44225f3980174
SSDEEP 196608:v1CqDMiqqJT+eAhDuMbpbbfhxv57R1/BxqxNJZvKkxhHY9:v1CqDT1mhDuMJhR5N1jqHN/Hq
TLSH
T1D986339CE5849337C4162EF08B95CAB34751EE181A72C1AB36C42E4FBBB0E606F65747
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KMT Client v6.2.exe

File Explorer

KMT Client v6.2.exe

.exe 7.9MB

KMT Client v6.2.exe

IMPHASH 8d92fa1956a6a631c642190121740197
SHA256 608e942f136306534c03bc930528c31a07d6cc0b5fe5633356fdf6ac7701fa11
MD5 8bd847fd20ed35e4ea0bc5cb123cf312
SHA1 6d4faa15cd1c1a8549a65f3d38dcc7d95657ec8a
SHA512 4ce4c86a214e56a70e1c9bbcdfe5db406fe60655d25c7e2c75d571b462810c2e3216dcef06bdc2b783c36560f18e9a87c7a1c892e496c6b91ee44225f3980174
SSDEEP 196608:v1CqDMiqqJT+eAhDuMbpbbfhxv57R1/BxqxNJZvKkxhHY9:v1CqDT1mhDuMJhR5N1jqHN/Hq
TLSH
T1D986339CE5849337C4162EF08B95CAB34751EE181A72C1AB36C42E4FBBB0E606F65747
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathAddBackslashA PathStripPathA PathRemoveFileSpecA

kernel32

GetModuleFileNameA FindResourceA GetModuleHandleA SizeofResource LoadResource GetTempPathA CreateDirectoryA DeleteFileA CreateFileA WriteFile CloseHandle CreateProcessA WaitForSingleObject RemoveDirectoryA FlushFileBuffers GetTempFileNameA GetCurrentThreadId GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

MessageBoxA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA

Sharing