BROOTH EXTERNAL V2.7.rar
- SHA256 de0e87ea9f7ee661dfb6e50ec37a5e62106a44c6b7a43d0719bb2cc1131ac3d7
Password
1
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BROOTH EXTERNAL V2.7.rar
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
BROOTH EXTERNAL V2.7.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target BROOTH EXTERNAL V2.7.rar
- Size 11.7MB
- Sample260620-pg3bzags8s
- SHA256 de0e87ea9f7ee661dfb6e50ec37a5e62106a44c6b7a43d0719bb2cc1131ac3d7
- MD5 90ecafff4fcd9d24cd3543010d40c02c
- SHA1 ccb498f64776e7267dd98fee460e8ec253c63ad0
- SHA512 b3dacb08a98dbb034315f1f34e32e2bf898d676aa04690bfa0532464e0917cfcb18ff8f6e722f66c854f5c43f7af5cd97d57b547e71e6b1ce7bc6f9190b7d6af
- SSDEEP 196608:fHPPcj1YXBC79ial4cXjuSo5nG89eA0lnpzElaXf/KI+BSwZBgTHJn5+yVtO4CVm:nP61YXPal4cXjvotGrhlnpzE2ESwZGJV
- TLSH T168C633973A407052E5C3AC20C31BF2057CB13A876E1AEDB953E2B93594C70A6BF54ED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BROOTH EXTERNAL V2.7.exe
File Explorer
-
BROOTH EXTERNAL V2.7.rar.rar 11.7MB
-
BROOTH EXTERNAL V2.7.exe.exe 13.1MB
BROOTH EXTERNAL V2.7.exe
- IMPHASH d9e0d26f07d212d8a1f2403e3c69958f
- SHA256 99f44ec8354bb8c89755a66914415e1d39be0cd60d1dc53a4338c997bd7f43fd
- MD5 af4abe74646dfa2625943b2b8dffcfb5
- SHA1 cd9bd8a1210e8fe987045902ab4c83b612781248
- SHA512 5d103d9bfa99b63865418a3bbeb0d88fbf01eabdd5bdcad52367319cc960bc4a3167ff7b2adbfcea03fd3746a9fa881725efbaa1fc3adfce71b4d9e6b87d1b47
- SSDEEP 196608:ZNlIQIqBGLlsidH0EM3EEilma80eX7tlTJCgFkgDF/6ZtPx6aWVnVkALVE1b26R:Z/DBGmidUEM72XPw85NZRxsVkiV
- TLSH T13ED623DB99C873D4C8D34AB0625F17CE70E1B5298DA9A92D37C61C42AE30FA74342D67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1
Minor OS version
0
Major OS version
6
Entry point
18363278
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
ole32
CoInitialize
kernel32
AddVectoredExceptionHandler
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetClipboardData
gdi32
CreateRoundRectRgn
advapi32
GetTokenInformation
msvcp140
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
imm32
ImmSetCompositionWindow
dwmapi
DwmExtendFrameIntoClientArea
ntdll
NtReadVirtualMemory
urlmon
URLDownloadToFileA
winmm
waveOutSetVolume
shlwapi
PathFindFileNameW
crypt32
CryptStringToBinaryW
ws2_32
sendto
psapi
GetModuleInformation
userenv
UnloadUserProfile
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-heap-l1-1-0
_msize
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
api-ms-win-crt-string-l1-1-0
strpbrk
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-time-l1-1-0
strftime
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-multibyte-l1-1-0
_mbsicmp
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-math-l1-1-0
_fdopen
api-ms-win-crt-locale-l1-1-0
localeconv
shell32
ShellExecuteA
Name
.text
Size
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1006KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.;?1
Size
Virtual Size
7.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.@eJ
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.?ej
Size
13.1MB
Virtual Size
13.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ