TheAltening[.]V2[.]App[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
TheAltening.V2.App.exe
Size 55.1MB
Sample261024-2a7dkaev8m
SHA256 cb3878066d367606ac67839ab57f24ebe6e172c5e44cd0621b023a8422ec00f6
MD5 52974c76e2c59850d03e260d939a346e
SHA1 ca2be1046ad998ab7ae55def1d7dff3f32e0ed6a
SHA512 42ab60af6289537593da80ad830a02eab4c3a95794c09c2ab63aeb3b3fdf9cb0c356b7daddc4d1ad9526e6ac6efc20582a75e4ffa4771257e39d5a0830770b6e
SSDEEP 1572864:WBdwf34wDYTt5LdC8YSCsa2ogNwaIXm3Isoqyv8E+ApJFLy:DwwGVXYsa2xhIs3yEEhf
TLSH
T19DC73318E3E910A1D57BEB74C6648333EA703D864B62C54F0A89F6552F33A909B3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TheAltening.V2.App.exe

File Explorer

TheAltening.V2.App.exe

.exe 55.1MB

TheAltening.V2.App.exe

IMPHASH 6122c7348293a16d6b86adac930b3fe9
SHA256 cb3878066d367606ac67839ab57f24ebe6e172c5e44cd0621b023a8422ec00f6
MD5 52974c76e2c59850d03e260d939a346e
SHA1 ca2be1046ad998ab7ae55def1d7dff3f32e0ed6a
SHA512 42ab60af6289537593da80ad830a02eab4c3a95794c09c2ab63aeb3b3fdf9cb0c356b7daddc4d1ad9526e6ac6efc20582a75e4ffa4771257e39d5a0830770b6e
SSDEEP 1572864:WBdwf34wDYTt5LdC8YSCsa2ogNwaIXm3Isoqyv8E+ApJFLy:DwwGVXYsa2xhIs3yEEhf
TLSH
T19DC73318E3E910A1D57BEB74C6648333EA703D864B62C54F0A89F6552F33A909B3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1830240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\adook\Documents\altening\TheAltening.V2.App-1.3.0\TheAltening.V2.App.Launcher\bin\Release\net9.0-windows10.0.19041.0\win-x64\native\TheAltening.V2.App.pdb

advapi32

AdjustTokenPrivileges DeregisterEventSource LookupPrivilegeValueW OpenProcessToken RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW

bcrypt

BCryptGenRandom BCryptDestroyHash BCryptOpenAlgorithmProvider BCryptHashData BCryptCloseAlgorithmProvider BCryptFinishHash BCryptGetProperty BCryptCreateHash

kernel32

EncodePointer FlsFree RaiseException RtlPcToFileHeader RtlUnwindEx CancelThreadpoolIo CloseHandle CloseThreadpoolIo CloseThreadpoolWait CloseThreadpoolWork CreateDirectoryW CreateEventExW CreateFileW CreateMutexExW CreatePipe CreateProcessW CreateThread CreateThreadpoolIo CreateThreadpoolWait CreateThreadpoolWork DeleteCriticalSection DeleteFileW DeleteVolumeMountPointW DeviceIoControl DuplicateHandle EnterCriticalSection ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageW FreeLibrary GetCPInfoExW GetConsoleCP GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumberEx GetCurrentThread GetDynamicTimeZoneInformation GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesExW GetFileInformationByHandleEx GetFileType GetFullPathNameW GetLastError GetLongPathNameW GetModuleFileNameW GetOverlappedResult GetProcAddress GetProcessId GetStdHandle GetSystemDirectoryW GetSystemTime GetThreadPriority GetTickCount64 GetTimeZoneInformation InitializeConditionVariable InitializeCriticalSection IsDebuggerPresent IsWow64Process K32EnumProcessModulesEx K32EnumProcesses K32GetModuleBaseNameW K32GetModuleFileNameExW K32GetModuleInformation LeaveCriticalSection LoadLibraryExW LocalAlloc LocalFree MoveFileExW MultiByteToWideChar OpenProcess QueryPerformanceCounter QueryPerformanceFrequency RaiseFailFastException ReadFile ReleaseMutex RemoveDirectoryW ResetEvent ResumeThread SetEvent SetFileInformationByHandle SetFilePointerEx SetLastError SetThreadErrorMode SetThreadPriority SetThreadpoolWait Sleep SleepConditionVariableCS StartThreadpoolIo SubmitThreadpoolWork SystemTimeToFileTime TzSpecificLocalTimeToSystemTime VirtualAlloc VirtualFree WaitForMultipleObjectsEx WaitForSingleObject WaitForThreadpoolWaitCallbacks WakeConditionVariable WideCharToMultiByte WriteFile FlushProcessWriteBuffers WaitForSingleObjectEx AddVectoredExceptionHandler GetModuleHandleW RtlVirtualUnwind RtlCaptureContext RtlRestoreContext VerSetConditionMask FlsAlloc FlsGetValue FlsSetValue CreateEventW SwitchToThread GetCurrentThreadId SuspendThread GetThreadContext SetThreadContext FlushInstructionCache VirtualProtect CreateMemoryResourceNotification QueryInformationJobObject GetModuleHandleExW GetProcessAffinityMask VerifyVersionInfoW InitializeContext GetEnabledXStateFeatures LocateXStateFeature SetXStateFeaturesMask VirtualQuery GetSystemTimeAsFileTime InitializeCriticalSectionEx SleepEx DebugBreak GlobalMemoryStatusEx GetSystemInfo GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLargePageMinimum VirtualUnlock VirtualAllocExNuma IsProcessInJob GetNumaHighestNodeNumber GetProcessGroupAffinity K32GetProcessMemoryInfo HeapCreate HeapDestroy HeapAlloc HeapFree GetProcessHeap SetUnhandledExceptionFilter InitializeSListHead

ole32

CoUninitialize CoTaskMemFree CoInitializeEx CoWaitForMultipleHandles CoCreateGuid CoGetApartmentType

api-ms-win-crt-math-l1-1-0

__setusermatherr modf ceil

api-ms-win-crt-heap-l1-1-0

_aligned_free free malloc _aligned_malloc _callnewh _set_new_mode calloc

api-ms-win-crt-string-l1-1-0

strcpy_s strlen strcmp _stricmp

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function terminate _initialize_onexit_table abort _register_thread_local_exe_atexit_callback _c_exit _cexit _seh_filter_exe _set_app_type _crt_atexit _configure_wide_argv _initialize_wide_environment _get_initial_wide_environment _initterm _initterm_e exit _exit __p___wargv __p___argc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale