tasks-hub-windows-x86_64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
tasks-hub-windows-x86_64.exe
Size 4.4MB
Sample261102-2rb9raxtht
SHA256 ead6a04d0f13d335107c7e3179d0b7c6a899c6bb053f33513148db6c7a05d76d
MD5 3942c9b0b15af40fe3a5d627530ca6df
SHA1 b2743e1a326d5ff563550b331ee03302551a2c5c
SHA512 f1361e813c2244b702dc261ee6c6c7e296bc34c4417b6ff2c8d82b8896da56b6a31ce6eee182326890afdb42f1e9761987cafb56d18a93c73e043b9bc48c793e
SSDEEP 49152:Mdfllu7uspsSebpT/nukQ4QPvSRNWKfifFesag2NzLPHo1Y1mDjHMutEf6tKa4XT:2kMqRiFLQ
TLSH
T1C9263C113A5BA87DD196C870934A8AA35E2130DB1A26B9FF40C895393F7DEF05F39724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tasks-hub-windows-x86_64.exe

File Explorer

tasks-hub-windows-x86_64.exe

.exe 4.4MB

tasks-hub-windows-x86_64.exe

IMPHASH c5d0b1c5d77dafd6b94b2a1f70f4b918
SHA256 ead6a04d0f13d335107c7e3179d0b7c6a899c6bb053f33513148db6c7a05d76d
MD5 3942c9b0b15af40fe3a5d627530ca6df
SHA1 b2743e1a326d5ff563550b331ee03302551a2c5c
SHA512 f1361e813c2244b702dc261ee6c6c7e296bc34c4417b6ff2c8d82b8896da56b6a31ce6eee182326890afdb42f1e9761987cafb56d18a93c73e043b9bc48c793e
SSDEEP 49152:Mdfllu7uspsSebpT/nukQ4QPvSRNWKfifFesag2NzLPHo1Y1mDjHMutEf6tKa4XT:2kMqRiFLQ
TLSH
T1C9263C113A5BA87DD196C870934A8AA35E2130DB1A26B9FF40C895393F7DEF05F39724
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2788816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

tasks_hub.pdb

bcryptprimitives

ProcessPrng

ws2_32

recv send shutdown WSAIoctl connect ioctlsocket WSASocketW closesocket freeaddrinfo WSAStartup WSASend getsockname listen bind getsockopt setsockopt WSAGetLastError accept getaddrinfo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetConsoleOutputCP ReleaseMutex WaitForSingleObject WriteConsoleW FlsAlloc IsThreadAFiber FlsSetValue FlsFree CreateMutexA SleepEx ReadFileEx WriteFileEx GetCurrentThreadId GetFullPathNameW FindFirstFileExW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx ReadConsoleW ReadDirectoryChangesW CreateDirectoryW ExitProcess CreateFileW GetOverlappedResult ReadFile TerminateProcess GetExitCodeProcess GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW CancelIo WaitForMultipleObjects DeleteFileW CopyFileExW MoveFileExW GetFileType InitializeSListHead WaitForSingleObjectEx FindNextFileW UnregisterWaitEx SetConsoleCtrlHandler SetFileCompletionNotificationModes CreateIoCompletionPort GetFinalPathNameByHandleW RegisterWaitForSingleObject SetLastError GetQueuedCompletionStatusEx ReleaseSemaphore CreateSemaphoreW GetProcessHeap HeapFree GetCommandLineW HeapReAlloc AddVectoredExceptionHandler GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry LoadLibraryA GetProcAddress lstrlenW RtlVirtualUnwind WideCharToMultiByte GetCurrentDirectoryW GetModuleHandleW FormatMessageW MultiByteToWideChar GetModuleHandleExW HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleA CompareStringOrdinal GetModuleFileNameW CreateThread RemoveDirectoryW FindClose SetHandleInformation GetCurrentThread SetThreadStackGuarantee GetSystemTimePreciseAsFileTime GetSystemInfo GetSystemTimeAsFileTime DuplicateHandle GetCurrentProcess GetStdHandle GetCurrentProcessId GetLastError PostQueuedCompletionStatus CloseHandle SwitchToThread SetUnhandledExceptionFilter GetConsoleMode CreateEventW

ntdll

RtlNtStatusToDosError NtCreateNamedPipeFile NtDeviceIoControlFile NtCreateFile NtWriteFile NtCancelIoFileEx NtReadFile NtOpenFile

vcruntime140

memcpy __CxxFrameHandler3 memcmp memmove memset _CxxThrowException __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-math-l1-1-0

pow __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _exit _crt_atexit _initialize_narrow_environment _cexit _seh_filter_exe exit terminate _set_app_type _initterm_e _configure_narrow_argv _register_onexit_function _register_thread_local_exe_atexit_callback _c_exit __p___argv _get_initial_narrow_environment _initterm __p___argc

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free