Resubmissions

26/06/2026, 17:15

260626-vsy2ksc15z7

26/06/2026, 17:14

260626-vsggjac15x8

General

  • Target
    antimicrox-3.6.1-Windows-AMD64.exe
  • Size 15.3MB
  • Sample260626-vsggjac15x
  • SHA256 467648540ab4bcf83641cb22b3359669bf1b9130b87d4be0aa438221ef3eb06b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 12 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • antimicrox-3.6.1-Windows-AMD64.exe
    .exe 15.3MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 30KB
  • $PLUGINSDIR/NSIS.InstallOptions.ini
    661B
  • $PLUGINSDIR/StartMenu.dll
    .dll 11KB
  • $PLUGINSDIR/System.dll
    .dll 25KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 7KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    264KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • bin/Qt6Concurrent.dll
    .dll 36KB
  • bin/Qt6Core.dll
    .dll 10.6MB
  • bin/Qt6Gui.dll
    .dll 10.9MB
  • bin/Qt6Network.dll
    .dll 1.9MB
  • bin/Qt6Widgets.dll
    .dll 6.8MB
  • bin/SDL2.dll
    .dll 2.3MB
  • bin/antimicrox.exe
    .exe 5.3MB
  • bin/libcrypto-3-x64.dll
    .dll 5.2MB
  • bin/libgcc_s_seh-1.dll
    .dll 148KB
  • bin/libssl-3-x64.dll
    .dll 957KB
  • bin/libstdc++-6.dll
    .dll 2.5MB
  • bin/libwinpthread-1.dll
    .dll 63KB
  • bin/platforms/qwindows.dll
    .dll 1.2MB
  • share/antimicrox/LICENSE_SDL_GameControllerDB
    926B
  • share/antimicrox/gamecontrollerdb.txt
    211KB
  • share/antimicrox/translations/antimicrox.qm
    127KB
  • share/antimicrox/translations/antimicrox_br.qm
    154B
  • share/antimicrox/translations/antimicrox_ca.qm
    16KB
  • share/antimicrox/translations/antimicrox_cs.qm
    14KB
  • share/antimicrox/translations/antimicrox_da.qm
    3KB
  • share/antimicrox/translations/antimicrox_de.qm
    151KB
  • share/antimicrox/translations/antimicrox_en.qm
    128KB
  • share/antimicrox/translations/antimicrox_es.qm
    327KB
  • share/antimicrox/translations/antimicrox_fa.qm
    18KB
  • share/antimicrox/translations/antimicrox_fi.qm
    119KB
  • share/antimicrox/translations/antimicrox_fr.qm
    158KB
  • share/antimicrox/translations/antimicrox_hr.qm
    14KB
  • share/antimicrox/translations/antimicrox_id.qm
    24KB
  • share/antimicrox/translations/antimicrox_it.qm
    303KB
  • share/antimicrox/translations/antimicrox_ja.qm
    32KB
  • share/antimicrox/translations/antimicrox_ko.qm
    120KB
  • share/antimicrox/translations/antimicrox_nb_NO.qm
    26KB
  • share/antimicrox/translations/antimicrox_nl.qm
    14KB
  • share/antimicrox/translations/antimicrox_pl.qm
    138KB
  • share/antimicrox/translations/antimicrox_pt.qm
    90KB
  • share/antimicrox/translations/antimicrox_pt_BR.qm
    60KB
  • share/antimicrox/translations/antimicrox_ru.qm
    311KB
  • share/antimicrox/translations/antimicrox_rue.qm
    24B
  • share/antimicrox/translations/antimicrox_sk.qm
    3KB
  • share/antimicrox/translations/antimicrox_sr.qm
    108KB
  • share/antimicrox/translations/antimicrox_sv.qm
    28KB
  • share/antimicrox/translations/antimicrox_ta.qm
    326KB
  • share/antimicrox/translations/antimicrox_tr.qm
    18KB
  • share/antimicrox/translations/antimicrox_uk.qm
    87KB
  • share/antimicrox/translations/antimicrox_vi.qm
    14KB
  • share/antimicrox/translations/antimicrox_zh_CN.qm
    256KB

antimicrox-3.6.1-Windows-AMD64.exe

  • IMPHASH c0f430a142bcdc701f4a3bdc3d2c6a84
  • SHA256 467648540ab4bcf83641cb22b3359669bf1b9130b87d4be0aa438221ef3eb06b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
17085
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths