hackerai-desktop[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
hackerai-desktop.exe
Size 7.0MB
Sample260723-ndfs5acc83
SHA256 123a44cabb5bf82c42e62f0f9f605815c2e99fbf7c5de5b85c4559d6856b6a35
MD5 275279b379baa2a7393f0ca97bdecc85
SHA1 1a1f9ad872a509fa4e1dce15e31240d2827e03ca
SHA512 102d1ed30fc1e89410a4fdb12c5103a035f11ac36e3e2076314314eb86fa8fb1c1aa37abb537de91f65ed5f4d4563a850b24bc74af862ee1ed2af284b8920454
SSDEEP 49152:KXLmEvthFgcraoD6dhYlRtFRyl8EzFFl18CR6janBkJJYxtKfdiQpr0fOSl5WTLK:iHfF0myVVyAmFPu+nf0vmn+
TLSH
T1A5762903F66181E8F05AC17483DAAF33E6E2BCB9092472AB56D47A212F75F507E1D748
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hackerai-desktop.exe

File Explorer

hackerai-desktop.exe

.exe 7.0MB

hackerai-desktop.exe

IMPHASH 3e0ee71bf143710ebf863e090328fcd0
SHA256 123a44cabb5bf82c42e62f0f9f605815c2e99fbf7c5de5b85c4559d6856b6a35
MD5 275279b379baa2a7393f0ca97bdecc85
SHA1 1a1f9ad872a509fa4e1dce15e31240d2827e03ca
SHA512 102d1ed30fc1e89410a4fdb12c5103a035f11ac36e3e2076314314eb86fa8fb1c1aa37abb537de91f65ed5f4d4563a850b24bc74af862ee1ed2af284b8920454
SSDEEP 49152:KXLmEvthFgcraoD6dhYlRtFRyl8EzFFl18CR6janBkJJYxtKfdiQpr0fOSl5WTLK:iHfF0myVVyAmFPu+nf0vmn+
TLSH
T1A5762903F66181E8F05AC17483DAAF33E6E2BCB9092472AB56D47A212F75F507E1D748
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5030768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

hackerai_desktop.pdb

kernel32

SetLastError GetNativeSystemInfo GetSystemInfo GetCurrentThreadId RegisterWaitForSingleObject GetUserPreferredUILanguages GetProcessId LCIDToLocaleName GetUserDefaultUILanguage ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime RtlPcToFileHeader LoadLibraryA RaiseException SwitchToThread FlsAlloc FlsGetValue FlsSetValue GetCommandLineW FlsFree LoadLibraryW QueryPerformanceCounter QueryPerformanceFrequency InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList TerminateProcess WaitForSingleObject GetExitCodeProcess SetErrorMode GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind FreeLibrary EncodePointer RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcessId WideCharToMultiByte MultiByteToWideChar GetModuleHandleW SleepEx FormatMessageW SetHandleInformation ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW WaitForMultipleObjects SetWaitableTimer RtlCaptureContext ExpandEnvironmentStringsW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW AddVectoredExceptionHandler InitializeSListHead SetUnhandledExceptionFilter SetFilePointerEx FindNextFileW CreateWaitableTimerExW DeviceIoControl CreateSymbolicLinkW DeleteFileW GetTempPathW GetFileAttributesW CancelIo CreateEventW CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindClose FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW CreateThread WriteFileEx ReadFileEx RtlUnwindEx WriteConsoleW GetConsoleOutputCP CreateMutexA ReleaseMutex DuplicateHandle GetCurrentProcess GetSystemTimePreciseAsFileTime lstrlenW HeapReAlloc GetCurrentThread SetThreadStackGuarantee Sleep SetNamedPipeHandleState CreateFileW CreateProcessW CancelIoEx SetFileCompletionNotificationModes DeleteCriticalSection CreateIoCompletionPort GetOverlappedResult PostQueuedCompletionStatus GetQueuedCompletionStatusEx GetFinalPathNameByHandleW CreateMutexW GetProcAddress GetModuleHandleA GetLastError UnregisterWaitEx WriteFile ReadFile CreatePipe GetNamedPipeInfo LoadLibraryExA GetFileType SetConsoleTextAttribute GetConsoleScreenBufferInfo OutputDebugStringA OutputDebugStringW LoadLibraryExW SetConsoleMode GetConsoleMode HeapAlloc GetStdHandle CloseHandle HeapFree GetProcessHeap InitializeCriticalSectionEx GetComputerNameExW

advapi32

SystemFunction036 EventSetInformation EventWriteTransfer RegGetValueW EventUnregister RegCloseKey RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegOpenKeyExW RegDeleteTreeW RegSetValueExW RegQueryValueExW EventRegister RegEnumValueW

ntdll

NtCreateFile NtWriteFile NtReadFile NtDeviceIoControlFile RtlNtStatusToDosError NtCreateNamedPipeFile RtlGetVersion NtOpenFile NtCancelIoFileEx

shell32

ILCreateFromPathW ShellExecuteExW ShellExecuteW ILFree DragFinish SHGetKnownFolderPath SHAppBarMessage DragQueryFileW SHOpenFolderAndSelectItems SHCreateItemFromParsingName

ole32

OleInitialize CoTaskMemFree CoCreateFreeThreadedMarshaler RevokeDragDrop RegisterDragDrop CoTaskMemAlloc CoInitializeEx CoUninitialize CoCreateInstance CoInitialize

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

user32

GetTouchInputInfo UpdateWindow InvalidateRect SetCursorPos SetCursor LoadCursorW GetForegroundWindow FlashWindowEx CloseTouchInputHandle RegisterTouchWindow IsWindow IsWindowEnabled IsIconic TrackMouseEvent IsWindowVisible EnableWindow FindWindowExW SetPropW MonitorFromRect SystemParametersInfoW MonitorFromPoint EnumDisplayMonitors DefWindowProcW ClipCursor GetClipCursor ShowCursor RegisterRawInputDevices SetWindowTextW GetWindowTextW GetWindowTextLengthW GetWindowLongPtrW SetWindowDisplayAffinity ReleaseCapture ToUnicodeEx GetKeyboardLayout SetWindowLongPtrW MapVirtualKeyExW GetKeyboardState CreateWindowExW RegisterClassExW GetMonitorInfoW AdjustWindowRect RedrawWindow GetWindowPlacement SetWindowPlacement PostMessageW SendMessageW SetWindowPos ChangeDisplaySettingsExW AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW GetSystemMenu InvalidateRgn RegisterWindowMessageA ScreenToClient GetParent SetWindowRgn DestroyWindow GetWindow IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen SetFocus GetCursorPos SendInput DrawTextW FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow PostQuitMessage SystemParametersInfoA GetActiveWindow SetMenu CreateIcon RemoveMenu CheckMenuItem EnableMenuItem DrawMenuBar CreatePopupMenu CreateMenu DrawIconEx ReleaseDC GetDC VkKeyScanW SetMenuItemInfoW AppendMenuW InsertMenuW CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetParent TranslateAcceleratorW GetSystemMetrics GetMenuItemInfoW MapVirtualKeyW GetUpdateRect ValidateRect GetRawInputData MsgWaitForMultipleObjectsEx DispatchMessageW GetMessageW PeekMessageW PostThreadMessageW GetAsyncKeyState FindWindowW GetKeyState EnumChildWindows DispatchMessageA TranslateMessage GetMessageA SetCapture

oleaut32

GetErrorInfo SetErrorInfo SysStringLen SysFreeString

comctl32

DefSubclassProc TaskDialogIndirect RemoveWindowSubclass SetWindowSubclass

shlwapi

SHCreateMemStream

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

gdi32

CreateRectRgn SelectObject SetTextColor DeleteDC BitBlt CreateDIBSection CreateSolidBrush DeleteObject GetDeviceCaps CombineRgn CreateCompatibleDC SetBkMode

bcryptprimitives

ProcessPrng

ws2_32

shutdown freeaddrinfo getaddrinfo WSACleanup WSAStartup setsockopt connect WSASocketW WSAIoctl getpeername WSASend getsockname listen bind ioctlsocket socket send recv WSAGetLastError getsockopt closesocket accept

bcrypt

BCryptGenRandom

crypt32

CertFreeCertificateChain CertFreeCertificateContext CertCreateCertificateChainEngine CertAddEncodedCertificateToStore CertCloseStore CertFreeCertificateChainEngine CertSetCertificateContextProperty CertVerifyCertificateChainPolicy CertOpenStore CertGetCertificateChain

api-ms-win-crt-string-l1-1-0

wcsncat wcscmp _wcsicmp wcslen strcpy_s strlen

api-ms-win-crt-math-l1-1-0

roundf floor pow __setusermatherr trunc round

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e abort exit _exit _configure_narrow_argv _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _register_onexit_function _initialize_narrow_environment _initialize_onexit_table _set_app_type terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free calloc _callnewh