HWABAG[.]exe | Triage™

Resubmissions

29/04/2026, 14:36

17/04/2026, 18:37

Target
HWABAG.exe
Size 92KB
Sample260429-ryxh6acz21
SHA256 e2636c32991e3e8b061d88daf3e769a6263d9a02ee27eae9a2e78ccf3ef1fec5
MD5 5b3f40d956be53a1e5acbb36124ed577
SHA1 bd077f5467d840e3e782841b687c61512b96bc47
SHA512 b6ab8ccbc8fdbef4dff66f1062e4ea37da1f76421e306b4cf7a43f58fe9e520bd8ba29363e8897b55a98facf42a52215386506aeebf8e93551e00c96edee3e78
SSDEEP 1536:mBwl+KXpsqN5vlwWYyhY9S4Ab6FDs1AtY4cvCPu5KLp+f87:Qw+asqN5aW/hL96FDs1ADPiipc87
TLSH
T186939D29D531C035F8A350FFCBF696BDAE644B20130794D797C01E89AB869D5F832A36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HWABAG.exe

IMPHASH f86dec4a80961955a89e7ed62046cc0e
SHA256 e2636c32991e3e8b061d88daf3e769a6263d9a02ee27eae9a2e78ccf3ef1fec5
MD5 5b3f40d956be53a1e5acbb36124ed577
SHA1 bd077f5467d840e3e782841b687c61512b96bc47
SHA512 b6ab8ccbc8fdbef4dff66f1062e4ea37da1f76421e306b4cf7a43f58fe9e520bd8ba29363e8897b55a98facf42a52215386506aeebf8e93551e00c96edee3e78
SSDEEP 1536:mBwl+KXpsqN5vlwWYyhY9S4Ab6FDs1AtY4cvCPu5KLp+f87:Qw+asqN5aW/hL96FDs1ADPiipc87
TLSH
T186939D29D531C035F8A350FFCBF696BDAE644B20130794D797C01E89AB869D5F832A36
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

Major OS version

Entry point

43472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\crysis\Release\PDB\payload.pdb