tkt installe[.]exe

General

Target
tkt installe.exe
Size 3.9MB
Sample261018-v82seagy91
SHA256 e04a0e66ccfbfa16d8f543c1187221f0b50beac5cc9aca104b51cd9c8723e412
MD5 77e5c5cee79c3aa8f7244be3d729dcb5
SHA1 8f7a136d5dd2add9ac0b6d76f375cff13b5fbe97
SHA512 d6cc3cdac7c3e7f22d5e3146ea4e19e126c62c4fa640796a9b541e589bf46cec594a80fce234217a57abf4b69f800686b7163b686c49a89cb278e0d5b6ce73ee
SSDEEP 49152:nVAbwaq3DjzzpD536PQOUFHouu7IlwNZhRs/Hd9DniqsUTK3jJ/KuxcUe5z0ePhE:VAwd9FHRujhq/99k/KuOd5geJfGq+h
TLSH
T11516332173809872D6E311329FB8F7999BBDF0580F635697BB940E5DDE30691AA32F01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tkt installe.exe

File Explorer

tkt installe.exe

.exe 3.9MB

tkt installe.exe

IMPHASH e59d00b0d90522ee1a983f13d4ff7e50
SHA256 e04a0e66ccfbfa16d8f543c1187221f0b50beac5cc9aca104b51cd9c8723e412
MD5 77e5c5cee79c3aa8f7244be3d729dcb5
SHA1 8f7a136d5dd2add9ac0b6d76f375cff13b5fbe97
SHA512 d6cc3cdac7c3e7f22d5e3146ea4e19e126c62c4fa640796a9b541e589bf46cec594a80fce234217a57abf4b69f800686b7163b686c49a89cb278e0d5b6ce73ee
SSDEEP 49152:nVAbwaq3DjzzpD536PQOUFHouu7IlwNZhRs/Hd9DniqsUTK3jJ/KuxcUe5z0ePhE:VAwd9FHRujhq/99k/KuOd5geJfGq+h
TLSH
T11516332173809872D6E311329FB8F7999BBDF0580F635697BB940E5DDE30691AA32F01
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

136128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualFree VirtualAlloc GetVersion IsProcessorFeaturePresent GetSystemDirectoryW GetProcAddress GetModuleHandleW LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ReleaseSemaphore InitializeCriticalSection WaitForSingleObject CreateEventW GetLastError SetEvent CloseHandle ResetEvent CreateSemaphoreW MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW FormatMessageW LocalFree CreateFileW SetFileTime SetFileAttributesW RemoveDirectoryW CreateDirectoryW DeleteFileW SetLastError SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW GetTickCount GetCurrentThreadId GetCurrentProcessId GetFileInformationByHandle FindClose FindFirstFileW FindNextFileW GetModuleHandleA GetFileAttributesW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess GetProcessAffinityMask GetSystemInfo GlobalMemoryStatus GetStdHandle Sleep GetVersionExW GetCommandLineW CreateProcessW GetExitCodeProcess HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW WriteConsoleW FreeLibraryAndExitThread ExitThread CreateThread TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead FormatMessageA QueryPerformanceFrequency GetLocaleInfoEx FindFirstFileExW AreFileApisANSI InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlUnwind RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue

user32

LoadIconW EndDialog KillTimer SetTimer DestroyWindow SendMessageW SetWindowTextW MessageBoxW PostMessageW LoadStringW DialogBoxParamW GetDlgItem GetWindowLongW SetWindowLongW ShowWindow CharUpperW

shell32

ShellExecuteExW

oleaut32

VariantClear SysStringLen SysAllocStringLen

Sharing