CDXTOOLV4[.]7[.]exe

Resubmissions

01/07/2026, 16:44

260701-t9bryaav7m8

25/04/2026, 00:30

260425-atlsesh13y7

Sharing

Copy URL Twitter E-mail

General

Target
CDXTOOLV4.7.exe
Size 16.2MB
Sample260425-atlsesh13y
SHA256 efa419bce735279690fb8bd8f577c467cedd6b266360789d5b2c13549f2558fb
MD5 8114dee77c0979c9f167b752b423d63f
SHA1 f5f699ec3631ef57f2c859b617b4254cec1e83dd
SHA512 ae4989b66d04e5429d51873315d91c987778587caba85217dd623859c1a71d19b7c04a0d2b4257ba5b522957ef8696d944dece24710092ea33278600b50461d5
SSDEEP 393216:5naOcX/xYNAB9d0oBQUP0jX70c88RpyBNPIYcpB9tzUMyUk+g70i3JS:NaxYmjWoBX0zILBNPjcr9dUuav3
TLSH
T15D0733B8E4D0E514E625D67CE4B567E2F3998038C381E2F7E6D2307D6E0668077277A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CDXTOOLV4.7.exe

File Explorer

CDXTOOLV4.7.exe

.exe 16.2MB

CDXTOOLV4.7.exe

IMPHASH 214feaa67f2611f337c17bded7d257ac
SHA256 efa419bce735279690fb8bd8f577c467cedd6b266360789d5b2c13549f2558fb
MD5 8114dee77c0979c9f167b752b423d63f
SHA1 f5f699ec3631ef57f2c859b617b4254cec1e83dd
SHA512 ae4989b66d04e5429d51873315d91c987778587caba85217dd623859c1a71d19b7c04a0d2b4257ba5b522957ef8696d944dece24710092ea33278600b50461d5
SSDEEP 393216:5naOcX/xYNAB9d0oBQUP0jX70c88RpyBNPIYcpB9tzUMyUk+g70i3JS:NaxYmjWoBX0zILBNPjcr9dUuav3
TLSH
T15D0733B8E4D0E514E625D67CE4B567E2F3998038C381E2F7E6D2307D6E0668077277A8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51692

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

LockResource GetModuleHandleW IsDebuggerPresent CreateDirectoryW SizeofResource SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError GetCurrentThreadId CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW GetSystemTimeAsFileTime FormatMessageA LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter InitializeSListHead

vcruntime140

wcschr __C_specific_handler __current_exception __current_exception_context memset memcpy memmove

api-ms-win-crt-runtime-l1-1-0

terminate abort _seh_filter_exe _set_app_type __p___wargv _errno _initialize_wide_environment _get_initial_wide_environment _initterm _initterm_e _exit exit __p___argc _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_wide_argv _crt_atexit _initialize_onexit_table _register_onexit_function

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode

api-ms-win-crt-convert-l1-1-0

mbstowcs wcstoul

api-ms-win-crt-stdio-l1-1-0

puts __stdio_common_vsprintf __stdio_common_vfprintf _set_fmode __acrt_iob_func __p__commode __stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

_wcsdup iswctype wcsncmp _wcsicmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale