BROOTH INTERNAL V2.5.rar
- SHA256 7a439495383766d7dda483558c4e96607bda6d9dedbb5f34bb5828993a974032
Password
1
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BROOTH INTERNAL V2.5.rar
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
BROOTH INTERNAL V2.5.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target BROOTH INTERNAL V2.5.rar
- Size 15.1MB
- Sample260620-pfs2xaf18x
- SHA256 7a439495383766d7dda483558c4e96607bda6d9dedbb5f34bb5828993a974032
- MD5 c3f143ee51751ed7a78343d8a9fcf80c
- SHA1 78c112fca6dbf9d9d7314b224e3551e797bc6343
- SHA512 072b2d2cf640eb78756d0f5dbb3eec25c537b318d6c35b58aec89ee148075f33092002785de0c40f01017afca477ba03d167d63b4bb82ba205e31311668445f6
- SSDEEP 393216:cN5p4q+sDMRIefBa5kKv/9wvLhZGGcXMSNuur+jg36YhML8oixb:cNz4CfEBGkiwhZFcXMSNuur+WBMLpixb
- TLSH T131F63369099BD6EF5E8F89688DB1959F8D801949C6D73016AF2EFBD090C83CCC8DD6C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BROOTH INTERNAL V2.5.exe
File Explorer
-
BROOTH INTERNAL V2.5.rar.rar 15.1MB
-
BROOTH INTERNAL V2.5.exe.exe 16.5MB
BROOTH INTERNAL V2.5.exe
- IMPHASH 9651c35f596d40e00472d7695b72ef7b
- SHA256 c88106328441cf9128f0d451c4047e962d78a058c4b7c249898745d2f906c457
- MD5 8a1178a12d9e52001a5d25df32dd3b99
- SHA1 bf8efb82cf83169a18150ec73a9eca857c714b93
- SHA512 c7a2f6b059a77897896c2ce5e404f518c94b1293c116eabe49c24ba914a2566fd3470619d84591594974fbc018e45980ea8de388b052b7caf1226a458002f650
- SSDEEP 196608:3qRjUYdgR7RwkpIv/Lnvpf46VV3EuZefoqBL9/A87spRpgng+QLcVwaFjiyqk86p:ajUdVwkWHLjCn3NszNlLmwJkuITB
- TLSH T1DC0733DB90BC83E9D4C717A09D4277DB24C4B42A5DA8C8583ACF5C03B916D5E81CDBBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1
Minor OS version
0
Major OS version
6
Entry point
15090605
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetCapture
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
msvcp140
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
wininet
InternetCloseHandle
urlmon
URLDownloadToFileA
imm32
ImmReleaseContext
dwmapi
DwmExtendFrameIntoClientArea
crypt32
CertCloseStore
ws2_32
getsockopt
shlwapi
PathFindFileNameW
psapi
GetModuleInformation
userenv
UnloadUserProfile
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__intrinsic_setjmp
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-runtime-l1-1-0
_errno
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-math-l1-1-0
acosf
api-ms-win-crt-time-l1-1-0
_localtime64
api-ms-win-crt-string-l1-1-0
strcspn
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-filesystem-l1-1-0
_unlink
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Name
.text
Size
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
419KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.*Zv
Size
Virtual Size
7.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.h%h
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.OH&
Size
16.5MB
Virtual Size
16.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
476B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ