Resubmissions

23/07/2026, 16:37

260723-t48vgs1tf14

14/07/2026, 09:19

260714-laf9dact9z

12/03/2026, 07:23

260312-h76czscy3l

12/03/2026, 07:14

260312-h26fsshw5v6

12/03/2026, 06:54

260312-hpjfhaht9y8

General

  • Target
    LTK-v1.4.0.exe
  • Size 52.5MB
  • Sample260714-laf9dact9z
  • SHA256 a720b2db6012196fffc7c6de06c2852849cf4c9928c55ced76abbf05889264df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Costura .NET executable packer 1 IoCs

    Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • LTK-v1.4.0.exe
    .exe 52.5MB
  • costura.dll
    .dll 5KB
  • costura.pdb
    7KB
  • google.apis.auth.dll
    .dll 232KB
  • google.apis.auth.pdb
    64KB
  • google.apis.core.dll
    .dll 84KB
  • google.apis.core.pdb
    28KB
  • google.apis.dll
    .dll 82KB
  • google.apis.pdb
    23KB
  • google.apis.youtube.v3.dll
    .dll 324KB
  • google.apis.youtube.v3.pdb
    118KB
  • newtonsoft.json.dll
    .dll 704KB

LTK-v1.4.0.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 a720b2db6012196fffc7c6de06c2852849cf4c9928c55ced76abbf05889264df
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Costura .NET executable packer

    Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
55004478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\evanm\Desktop\Leuans - Sims 4 ToolKit\Sources\WPF_Modern 2026\ModernDesign\obj\Release\LTK.pdb