al-khaser_x64[.]exe

Resubmissions

03/11/2026, 19:36

261103-ybpncsvyhz

30/10/2026, 14:15

261030-rkscaacy2w9

Sharing

Copy URL Twitter E-mail

General

Target
al-khaser_x64.exe
Size 274KB
Sample261030-rkscaacy2w
SHA256 0cd8a40ff7ceef9c1368446d6ead91549681e88fdfa0f9f5a63c03fe38420baf
MD5 d5a6753ff6151e72690f615fbfc1844e
SHA1 d6820a5803d94897888f994cd8d90f607874ac42
SHA512 04c5c54c0c53d7dc23caddc44217a917f2fb065d4c6cd349edc02a725ef893c975704ca87db388ed023cfdb97c3b57e3b706f7c2309e53e4c2241bea81b41401
SSDEEP 6144:fj2h45zOFBXMIMd9y5bwm7UZNX2NNNylIC7:f+4VeXM/fy3omNW
TLSH
T131545B12F7E84055F6E796B8DEB24001DE72B8450B31D16F1748C9B90F7AA84FB7AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
al-khaser_x64.exe

File Explorer

al-khaser_x64.exe

.exe 274KB

al-khaser_x64.exe

IMPHASH 1d45844ff3179896b9d9477efee1bead
SHA256 0cd8a40ff7ceef9c1368446d6ead91549681e88fdfa0f9f5a63c03fe38420baf
MD5 d5a6753ff6151e72690f615fbfc1844e
SHA1 d6820a5803d94897888f994cd8d90f607874ac42
SHA512 04c5c54c0c53d7dc23caddc44217a917f2fb065d4c6cd349edc02a725ef893c975704ca87db388ed023cfdb97c3b57e3b706f7c2309e53e4c2241bea81b41401
SSDEEP 6144:fj2h45zOFBXMIMd9y5bwm7UZNX2NNNylIC7:f+4VeXM/fy3omNW
TLSH
T131545B12F7E84055F6E796B8DEB24001DE72B8450B31D16F1748C9B90F7AA84FB7AB12
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

99416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\al-khaser\al-khaser\x64\Release\al-khaser.pdb

kernel32

SetLastError OutputDebugStringW GetLastError GetModuleHandleExW VirtualQuery OpenProcess K32GetModuleFileNameExW GetWindowsDirectoryW QueryInformationJobObject GetCurrentProcessId K32GetProcessImageFileNameW QueryDosDeviceW GetSystemDirectoryW GetEnvironmentVariableW GetModuleFileNameW K32GetMappedFileNameW CreateToolhelp32Snapshot Module32FirstW Module32NextW CreateMutexW SetHandleInformation CreateEventW SetEvent CreateThread SwitchToThread WaitForSingleObject SetUnhandledExceptionFilter RaiseException GetWriteWatch GlobalGetAtomNameW GetBinaryTypeW HeapQueryInformation ReadProcessMemory ResetWriteWatch GetModuleHandleW GetComputerNameW GetComputerNameExW GetSystemWindowsDirectoryW CreateFileW LocalAlloc DeviceIoControl LocalFree GetTickCount GlobalMemoryStatusEx GetDiskFreeSpaceExW Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection VerSetConditionMask GetFullPathNameW VirtualAllocEx WriteProcessMemory CreateRemoteThread VirtualFreeEx Thread32First OpenThread QueueUserAPC Thread32Next LoadLibraryA GetStdHandle GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleTitleW GetConsoleWindow FormatMessageW lstrlenW LocalSize MultiByteToWideChar GetFileAttributesW HeapAlloc HeapFree Process32FirstW Process32NextW WaitForMultipleObjects CreateWaitableTimerW SetWaitableTimer CancelWaitableTimer CreateTimerQueue CreateTimerQueueTimer DeleteTimerQueueEx VerifyVersionInfoW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext Sleep LoadLibraryW GetProcAddress K32GetModuleInformation VirtualProtect GetSystemInfo GetProcessHeap IsDebuggerPresent RemoveVectoredExceptionHandler AddVectoredExceptionHandler VirtualFree GetCurrentThread GetThreadContext VirtualAlloc CloseHandle GetCurrentProcess ExpandEnvironmentStringsW CheckRemoteDebuggerPresent

user32

TranslateMessage GetMessageW DispatchMessageW GetWindowThreadProcessId wsprintfW GetCursorPos GetLastInputInfo SetTimer GetSystemMetrics FindWindowW KillTimer GetShellWindow SetWindowsHookExW MoveWindow

advapi32

CloseServiceHandle RegOpenKeyExW GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW EnumServicesStatusExW GetUserNameW OpenSCManagerW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegQueryValueExW

shell32

SHGetSpecialFolderPathW

ole32

CoUninitialize CoCreateInstance CoSetProxyBlanket CoInitializeEx CoInitializeSecurity

oleaut32

SysFreeString VariantClear SafeArrayUnaccessData SafeArrayGetElement SafeArrayGetUBound SafeArrayGetLBound SafeArrayAccessData VariantInit SysAllocString

msvcp140

_Equivalent ?_Xinvalid_argument@std@@YAXPEBD@Z _To_wide ?_Syserror_map@std@@YAPEBDH@Z ?_Xlength_error@std@@YAXPEBD@Z

ws2_32

socket WSAStartup freeaddrinfo getaddrinfo connect WSACleanup closesocket send recv

shlwapi

PathCombineW PathMatchSpecW StrCmpNIW StrStrW StrCmpW StrChrW StrCmpIW StrStrIW ord156 PathFindFileNameW PathRemoveExtensionW PathGetDriveNumberW wnsprintfW

mpr

WNetGetProviderNameW

iphlpapi

IcmpCreateFile IcmpSendEcho GetAdaptersInfo IcmpCloseHandle

winmm

timeSetEvent timeGetDevCaps timeKillEvent timeEndPeriod

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW

powrprof

GetPwrCapabilities

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp memset _CxxThrowException memcpy __current_exception_context memmove __current_exception __std_exception_copy __std_exception_destroy __C_specific_handler wcsstr wcschr wcsrchr

api-ms-win-crt-runtime-l1-1-0

terminate _invoke_watson _register_thread_local_exe_atexit_callback _c_exit __p___argv _errno _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type exit _get_initial_narrow_environment _initterm _initterm_e _exit __p___argc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __stdio_common_vfwprintf getchar fclose fputc __p__commode _wfopen_s _set_fmode __stdio_common_vswprintf_s __stdio_common_vswprintf __acrt_iob_func

api-ms-win-crt-convert-l1-1-0

strtol _wcstoui64_l

api-ms-win-crt-string-l1-1-0

isxdigit wcsncpy_s _wcsupr_s wcscpy_s _wcsicmp strtok_s

api-ms-win-crt-heap-l1-1-0

_callnewh malloc realloc _set_new_mode calloc free

api-ms-win-crt-locale-l1-1-0

_configthreadlocale _get_current_locale

api-ms-win-crt-time-l1-1-0

_wasctime_s _localtime64_s _time64

api-ms-win-crt-math-l1-1-0

__setusermatherr