awjtlxvfq[.]exe | Triage™

Resubmissions

14/08/2026, 16:56

260814-vfrfzaysdy

14/08/2026, 16:55

260814-ve41nsxfka3

Sharing

Copy URL Twitter E-mail

General

Target
awjtlxvfq.exe
Size 591KB
Sample260814-vfrfzaysdy
SHA256 55fc054c1d75001f9b11007757f3433a0495132fb8e4e3690908e6a32860050a
MD5 4927713cf2d7781c469a136ba52a9799
SHA1 fe4d9d47e2320fb819c6fad1383fa7b37c9764be
SHA512 2e774ee7da8553c4eef440508f68c23d6a9642cdedf2a57ca4d22a9530b6d55a1402d66b4d809e7c90053840727b43f5cb89eba499d0635596c9f49501da1d61
SSDEEP 3072:yIbJUiexELfBL9dTMKr/fN6XZpdURlmU0FEZ77+Bz:y+ffttd+ZjilU+mBz
TLSH
T153D4D3B0B60004AED956FDBE494F4FEB59F276E70E3C49CAA1E5E1F4A5710908364CE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
awjtlxvfq.exe

File Explorer

awjtlxvfq.exe

.exe 591KB

awjtlxvfq.exe

IMPHASH ae7fe3f8e0868c0a0a6ceda4968d2f92
SHA256 55fc054c1d75001f9b11007757f3433a0495132fb8e4e3690908e6a32860050a
MD5 4927713cf2d7781c469a136ba52a9799
SHA1 fe4d9d47e2320fb819c6fad1383fa7b37c9764be
SHA512 2e774ee7da8553c4eef440508f68c23d6a9642cdedf2a57ca4d22a9530b6d55a1402d66b4d809e7c90053840727b43f5cb89eba499d0635596c9f49501da1d61
SSDEEP 3072:yIbJUiexELfBL9dTMKr/fN6XZpdURlmU0FEZ77+Bz:y+ffttd+ZjilU+mBz
TLSH
T153D4D3B0B60004AED956FDBE494F4FEB59F276E70E3C49CAA1E5E1F4A5710908364CE2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

122352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\steam\Desktop\skeet\Bin\x64\Release\loader.pdb

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateTextureFromFileInMemoryEx D3DXCreateFontA D3DXCreateSprite

kernel32

WriteProcessMemory WriteFile WaitForSingleObject OpenProcess CreateToolhelp32Snapshot GetExitCodeThread GetTempPathA CreateFileA DeleteFileA Process32Next CloseHandle GetProcAddress GetModuleFileNameA GetModuleHandleW CreateRemoteThread VirtualFreeEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetLastError InitializeSListHead SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive Process32First ReleaseSRWLockExclusive VirtualAllocEx

user32

DispatchMessageA LoadCursorA ScreenToClient GetCapture GetDesktopWindow GetWindowRect CreateWindowExA TranslateMessage SetCapture PeekMessageA DefWindowProcA SetWindowPos PostQuitMessage ShowWindow GetCursorPos ReleaseCapture UpdateWindow RegisterClassExA UnregisterClassA

gdi32

AddFontMemResourceEx RemoveFontMemResourceEx

advapi32

RegCreateKeyExA RegOpenKeyA RegCloseKey

shell32

ShellExecuteA

msvcp140

_Query_perf_frequency ?_Xbad_function_call@std@@YAXXZ _Query_perf_counter ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?good@ios_base@std@@QEBA_NXZ

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

wininet

InternetOpenUrlA InternetReadFile InternetOpenA InternetCloseHandle HttpSendRequestA HttpOpenRequestA InternetConnectA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_terminate memcmp memcpy __current_exception memset __C_specific_handler __std_exception_destroy memmove __current_exception_context _CxxThrowException

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _exit _seh_filter_exe _c_exit _invoke_watson _cexit _crt_atexit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv exit terminate _set_app_type _get_narrow_winmain_command_line _errno

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-string-l1-1-0

strcpy_s _stricmp strcat_s

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-convert-l1-1-0

strtoll strtod strtoull

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsprintf __p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr ceilf floorf roundf _dclass _dsign

api-ms-win-crt-filesystem-l1-1-0

rename

api-ms-win-crt-locale-l1-1-0

localeconv _configthreadlocale