A3338C4DFD8[.]exe | Triage™

Resubmissions

23/06/2026, 03:43

260623-d94vqaav6t7

23/06/2026, 03:38

260623-d659daav5v4

Sharing

Copy URL Twitter E-mail

General

Target
A3338C4DFD8.exe
Size 23.2MB
Sample260623-d659daav5v
SHA256 5c8686057376c819505436fccd735b9471309c42bf9486d34bbe19695bf9ab6a
MD5 36e0d9d995321990e9f5121abbe6d341
SHA1 46d131593694d4278aa57cee4fe71d1f50a8530c
SHA512 5a473cdb23149f3d8cd2d12a5b1794bc067cc04c854df44b68936940ea92cc51c7b2be2747be83837737d37336812cf8b92768c50d4c4096e412ed98dfa70bad
SSDEEP 393216:e33Aenzs37qIg96AahTxoCpGUKTc3UwKCHVR1yJAo02iBc+zUoNxuY3Bx8:mAenQ37qI20FWCpG5I3bKCHVDyJAo02q
TLSH
T1733733C9949E15E4F0E2D3F45B6A609D7438B73C4F81DCB3389827386B6B2465BA1E03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
A3338C4DFD8.exe

File Explorer

A3338C4DFD8.exe

.exe 23.2MB

A3338C4DFD8.exe

IMPHASH 91e6b42a0471a6082544402441352056
SHA256 5c8686057376c819505436fccd735b9471309c42bf9486d34bbe19695bf9ab6a
MD5 36e0d9d995321990e9f5121abbe6d341
SHA1 46d131593694d4278aa57cee4fe71d1f50a8530c
SHA512 5a473cdb23149f3d8cd2d12a5b1794bc067cc04c854df44b68936940ea92cc51c7b2be2747be83837737d37336812cf8b92768c50d4c4096e412ed98dfa70bad
SSDEEP 393216:e33Aenzs37qIg96AahTxoCpGUKTc3UwKCHVR1yJAo02iBc+zUoNxuY3Bx8:mAenQ37qI20FWCpG5I3bKCHVDyJAo02q
TLSH
T1733733C9949E15E4F0E2D3F45B6A609D7438B73C4F81DCB3389827386B6B2465BA1E03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28515145

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ntdll

NtQuerySystemInformation

version

VerQueryValueA

bcrypt

BCryptEncrypt

kernel32

GetFullPathNameA

user32

PostQuitMessage

advapi32

IsValidSid

shell32

SHGetFolderPathA

msvcp140

_Thrd_detach

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

wininet

InternetOpenUrlA

urlmon

URLDownloadToFileA

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCompositionWindow

normaliz

IdnToAscii

wldap32

ord30

crypt32

CertEnumCertificatesInStore

ws2_32

getpeername

shlwapi

PathRemoveFileSpecA

psapi

GetModuleInformation

iphlpapi

GetIpForwardTable

winhttp

WinHttpReceiveResponse

winmm

PlaySoundA

mpr

WNetGetProviderNameA

wintrust

WinVerifyTrust

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-runtime-l1-1-0

_initterm

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

fclose

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-string-l1-1-0

isupper

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

ldexp

Name

.text

Size

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

330KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

20.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.+Y]

Size

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.x/&

Size

1024B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.;W:

Size

23.2MB

Virtual Size

23.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

A3338C4DFD8.exe

ntdll

version

bcrypt

kernel32

user32

advapi32

shell32

msvcp140

d3d11

d3dx11_43

wininet

urlmon

d3dcompiler_43

dwmapi

imm32

normaliz

wldap32

crypt32

ws2_32

shlwapi

psapi

iphlpapi

winhttp

winmm

mpr

wintrust

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic