Resubmissions

02/07/2026, 04:00

260702-ek6hpah14n

02/07/2026, 03:59

260702-ekdgxah14k9

02/07/2026, 03:58

260702-ejmzysbw7t9

General

  • Target
    AAct.exe
  • Size 2.9MB
  • Sample260702-ejmzysbw7t
  • SHA256 ba4b36725a5a50d0b04fa52b63c72a717bcedc2c1b9d9b536f33aed54dce237a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • AAct.exe
    .exe 2.9MB

AAct.exe

  • IMPHASH 63a4626067f00b475a3bc5b312cb4231
  • SHA256 ba4b36725a5a50d0b04fa52b63c72a717bcedc2c1b9d9b536f33aed54dce237a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths