B68F8F846A0[.]exe | Triage™

Resubmissions

21/06/2026, 00:07

260621-aefb4abt9v

21/06/2026, 00:06

260621-ad6snabt8x3

Sharing

Copy URL Twitter E-mail

General

Target
B68F8F846A0.exe
Size 23.6MB
Sample260621-aefb4abt9v
SHA256 237926a7b95ad4765bfcf3881f3aea72eb9b09cbbade427366bab7c1f921192f
MD5 7c79a8f240839f3ac3481bbe7719d63c
SHA1 b0b224278a50a7fb97dac6f5e6799835268694df
SHA512 f89940cd6af91fd41fb1b769bc925ad9bd389ced20b59a949dfcfa7cc6c998f69b3b938543886f5816718bfc46e02212e9ff68317cd202302bf9fb9a30404f02
SSDEEP 393216:eslFd5K1qQo2iuhrjxh+sBBaUBId6BiXJ65hOK6CEEiwSMCt8:Dwzo2fXtqUU6BiXOp6ht8
TLSH
T1B0473372B8C67EE0C1DFEBB6D2C16CAD7067F76782EB8C21765974220C96618773A041
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
B68F8F846A0.exe

File Explorer

B68F8F846A0.exe

.exe 23.6MB

B68F8F846A0.exe

IMPHASH d5ee9025ee33054a92b2782e31c67550
SHA256 237926a7b95ad4765bfcf3881f3aea72eb9b09cbbade427366bab7c1f921192f
MD5 7c79a8f240839f3ac3481bbe7719d63c
SHA1 b0b224278a50a7fb97dac6f5e6799835268694df
SHA512 f89940cd6af91fd41fb1b769bc925ad9bd389ced20b59a949dfcfa7cc6c998f69b3b938543886f5816718bfc46e02212e9ff68317cd202302bf9fb9a30404f02
SSDEEP 393216:eslFd5K1qQo2iuhrjxh+sBBaUBId6BiXJ65hOK6CEEiwSMCt8:Dwzo2fXtqUU6BiXOp6ht8
TLSH
T1B0473372B8C67EE0C1DFEBB6D2C16CAD7067F76782EB8C21765974220C96618773A041
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33625126

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ntdll

RtlCaptureContext

setupapi

SetupDiEnumDeviceInfo

version

GetFileVersionInfoSizeA

bcrypt

BCryptFinishHash

kernel32

MapViewOfFile

user32

UnregisterClassA

advapi32

RegCloseKey

shell32

SHGetFolderPathA

msvcp140

_Query_perf_frequency

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

wininet

InternetCloseHandle

urlmon

URLDownloadToFileA

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmGetContext

normaliz

IdnToAscii

wldap32

ord143

crypt32

CertEnumCertificatesInStore

ws2_32

connect

shlwapi

PathRemoveFileSpecA

psapi

GetModuleInformation

iphlpapi

GetIpForwardTable

winmm

PlaySoundA

mpr

WNetGetProviderNameA

wintrust

WinVerifyTrust

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_errno

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-string-l1-1-0

isspace

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-stdio-l1-1-0

feof

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

fmodf

Name

.text

Size

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

335KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

20.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wQE

Size

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Jbx

Size

1024B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bs~

Size

23.6MB

Virtual Size

23.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

B68F8F846A0.exe

ntdll

setupapi

version

bcrypt

kernel32

user32

advapi32

shell32

msvcp140

d3d11

d3dx11_43

wininet

urlmon

d3dcompiler_43

dwmapi

imm32

normaliz

wldap32

crypt32

ws2_32

shlwapi

psapi

iphlpapi

winmm

mpr

wintrust

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic