Loxware[.]exe | Triage™

Resubmissions

27/04/2026, 16:12

260427-tnzxmsh17j8

27/04/2026, 10:35

260427-mmxmkahv218

Sharing

Copy URL Twitter E-mail

General

Target
Loxware.exe
Size 794KB
Sample260427-mmxmkahv21
SHA256 e6a2295b62d39c78ae5fad2038e6776e7bddf12e052211badd2a3d3c7e398089
MD5 ae20cfda4296f9c4ff1af23e7f23c133
SHA1 3b4b4e2e4a995c7bd7823fe4a93fb9875ae369ef
SHA512 9d89af8fe274de83717be69afc7e61e6b0a3cfbfaab4f15a206cdab32273016dc50f69cc2972f391c7e78e8f2bf881e3ea68ce9a847b4a5c6ad1fbc26f5592ee
SSDEEP 24576:+cuZz6sik299joDTF71tbc7SKx+ixn08q:+cu9FBFDbc7S4Xxn08
TLSH
T19405AF06F1AC41FCD0BFA178A557E61BFA763409132099DB53E44A682FA33E05F7A712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loxware.exe

File Explorer

Loxware.exe

.exe 794KB

Loxware.exe

IMPHASH ecd24e35a22e4e04286eec49710a500a
SHA256 e6a2295b62d39c78ae5fad2038e6776e7bddf12e052211badd2a3d3c7e398089
MD5 ae20cfda4296f9c4ff1af23e7f23c133
SHA1 3b4b4e2e4a995c7bd7823fe4a93fb9875ae369ef
SHA512 9d89af8fe274de83717be69afc7e61e6b0a3cfbfaab4f15a206cdab32273016dc50f69cc2972f391c7e78e8f2bf881e3ea68ce9a847b4a5c6ad1fbc26f5592ee
SSDEEP 24576:+cuZz6sik299joDTF71tbc7SKx+ixn08q:+cu9FBFDbc7S4Xxn08
TLSH
T19405AF06F1AC41FCD0BFA178A557E61BFA763409132099DB53E44A682FA33E05F7A712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

638556

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\gonca\Desktop\loxwareproj\Solution2\x64\Release\csbase.pdb

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

GetModuleFileNameA GetVolumeInformationA OpenProcess Sleep Process32NextW Process32FirstW LocalFree GetModuleHandleW GetComputerNameA QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId IsDebuggerPresent CreateEventW WaitForSingleObjectEx SetEvent DeleteCriticalSection Module32NextW LeaveCriticalSection EnterCriticalSection IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared GetProcAddress IsDBCSLeadByte QueryPerformanceFrequency LoadLibraryA Module32FirstW CloseHandle CreateToolhelp32Snapshot InitializeCriticalSectionAndSpinCount GetLocaleInfoA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc MultiByteToWideChar ReadProcessMemory OutputDebugStringA GetSystemTimeAsFileTime ResetEvent InitializeSListHead

user32

ScreenToClient GetClipboardData GetWindowLongW SetWindowPos SetWindowLongPtrW GetWindowLongPtrW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage CreateWindowExW GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetMessageExtraInfo GetForegroundWindow LoadCursorW SetCapture SetCursor EmptyClipboard CloseClipboard OpenClipboard GetCursorPos GetDesktopWindow UpdateWindow GetSystemMetrics GetAsyncKeyState SendInput DefWindowProcW GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetKeyState SetClipboardData

advapi32

RegCloseKey RegQueryValueExA RegCreateKeyExA RegDeleteValueA RegOpenKeyExA RegSetValueExA GetUserNameA

shell32

ShellExecuteA ShellExecuteW

ole32

CoCreateInstance CoInitializeEx

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

msvcp140

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ??Bid@locale@std@@QEAA_KXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?_Xlength_error@std@@YAXPEBD@Z _Query_perf_frequency ?_Throw_C_error@std@@YAXH@Z _Mtx_lock _Thrd_sleep _Query_perf_counter _Xtime_get_ticks _Mtx_unlock ?_Xout_of_range@std@@YAXPEBD@Z _Mtx_destroy_in_situ _Mtx_init_in_situ ?uncaught_exceptions@std@@YAHXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_function_call@std@@YAXXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z _Cnd_do_broadcast_at_thread_exit _Thrd_detach ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

dwmapi

DwmExtendFrameIntoClientArea

bcrypt

BCryptGetProperty BCryptCreateHash BCryptHashData BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptFinishHash BCryptGenRandom BCryptOpenAlgorithmProvider

crypt32

CryptUnprotectData CryptBinaryToStringA CryptStringToBinaryA CryptProtectData

winhttp

WinHttpCrackUrl WinHttpReceiveResponse WinHttpOpen WinHttpAddRequestHeaders WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpQueryDataAvailable

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy memcmp memchr _CxxThrowException __std_terminate strchr __std_exception_destroy __std_exception_copy __current_exception __current_exception_context __C_specific_handler memset

api-ms-win-crt-stdio-l1-1-0

ungetc _fseeki64 setvbuf fgetpos _get_stream_buffer_pointers ftell fgetc __acrt_iob_func __p__commode fputc _set_fmode fsetpos fflush __stdio_common_vsscanf fread __stdio_common_vsprintf _wfopen fwrite fclose __stdio_common_vfprintf fseek

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

tolower strncmp strcmp strncpy

api-ms-win-crt-heap-l1-1-0

free _callnewh _set_new_mode malloc

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _initialize_onexit_table _seh_filter_exe _set_app_type _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _invalid_parameter_noinfo_noreturn __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _beginthreadex terminate _errno _register_onexit_function system

api-ms-win-crt-convert-l1-1-0

strtoull strtoll strtod strtoul atof

api-ms-win-crt-math-l1-1-0

pow ceilf cosf logf _dsign atan2f sinf _dclass log powf sqrtf _fdclass fmodf __setusermatherr acosf

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

localeconv _configthreadlocale