malware_extraido[.]exe

Resubmissions

17/07/2026, 00:23

260717-apl8dsbz9t3

17/07/2026, 00:19

260717-al9vaabz7v3

Sharing

Copy URL Twitter E-mail

General

Target
malware_extraido.exe
Size 5.7MB
Sample260717-apl8dsbz9t
SHA256 732e7cd508f08a38b7959ec0d8059509e52d50ae94c0e4e43927ce4e7fd13529
MD5 7ea09d43d49d36fb30cb3f571dde6f2a
SHA1 8728ac22986ae64eca111388cacca2fe389d62df
SHA512 335d86622e9628b61ee676cf7831af03b39a858950ac108b10780ca71982e2b0e9ff2795885ae8f3398215826cde1193e337e391751825feee19db9576948419
SSDEEP 49152:2JWJDsmXY5DReVjQH8Vguit9ph+rGgcbLFn3wWIaeMme88n2fEtKK+GntXYGwhXa:2re+3GhcnneJe88YWW
TLSH
T12F56CF53FA95C2E9C09EC1B8C71B5227EB72B88D0920B79B6BE84A113F57B205F4D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
malware_extraido.exe

File Explorer

malware_extraido.exe

.exe 5.7MB

malware_extraido.exe

IMPHASH 62fb86ad607ad893e1d30cf644f2a753
SHA256 732e7cd508f08a38b7959ec0d8059509e52d50ae94c0e4e43927ce4e7fd13529
MD5 7ea09d43d49d36fb30cb3f571dde6f2a
SHA1 8728ac22986ae64eca111388cacca2fe389d62df
SHA512 335d86622e9628b61ee676cf7831af03b39a858950ac108b10780ca71982e2b0e9ff2795885ae8f3398215826cde1193e337e391751825feee19db9576948419
SSDEEP 49152:2JWJDsmXY5DReVjQH8Vguit9ph+rGgcbLFn3wWIaeMme88n2fEtKK+GntXYGwhXa:2re+3GhcnneJe88YWW
TLSH
T12F56CF53FA95C2E9C09EC1B8C71B5227EB72B88D0920B79B6BE84A113F57B205F4D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2521816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

crypt32

CertFreeCertificateContext CryptUnprotectData CertDuplicateCertificateContext CertDuplicateStore CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy CertOpenStore CertDuplicateCertificateChain CertAddCertificateContextToStore CertCloseStore CertEnumCertificatesInStore

kernel32

LoadLibraryA CreateMutexA ReleaseMutex GetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile WriteConsoleW FlsAlloc GetModuleHandleExW FlsFree FlsSetValue IsThreadAFiber SetFileCompletionNotificationModes SleepEx ReadFileEx WriteFileEx CreateIoCompletionPort ReadFile SetHandleInformation CreateThread GetFullPathNameW SetFileTime SetFileInformationByHandle FindFirstFileExW PostQueuedCompletionStatus GetQueuedCompletionStatusEx CreateDirectoryW ExitProcess CreateEventW CancelIo GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle GetFinalPathNameByHandleW GetTempPathW DeleteFileW CopyFileExW WaitForSingleObjectEx SetLastError GetCurrentProcess SetFilePointerEx FindNextFileW IsProcessorFeaturePresent FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW GetSystemTime GetSystemTimeAsFileTime FreeLibrary GetFileSize LockFileEx UnlockFile HeapDestroy HeapCompact LoadLibraryW DeleteFileA CreateFileA FlushViewOfFile GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA CreateFileW HeapSize HeapValidate UnmapViewOfFile CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW HeapCreate AreFileApisANSI UnhandledExceptionFilter SetUnhandledExceptionFilter CancelIoEx GetCurrentThread GetModuleHandleA GetCommandLineW SetThreadStackGuarantee SetWaitableTimer CreateWaitableTimerExW GetProcAddress LocalFree FindClose TerminateProcess SetCurrentDirectoryW AddVectoredExceptionHandler RtlCaptureContext RtlLookupFunctionEntry lstrlenW WideCharToMultiByte RtlVirtualUnwind GetCurrentDirectoryW MultiByteToWideChar GetEnvironmentVariableW QueryPerformanceFrequency QueryPerformanceCounter CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW FormatMessageA SystemTimeToFileTime OutputDebugStringW OutputDebugStringA RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetSystemTimePreciseAsFileTime GetFileInformationByHandle GetExitCodeProcess WaitForSingleObject GetOverlappedResult WaitForMultipleObjects SwitchToThread Sleep GetModuleFileNameW GetModuleHandleW GetCurrentThreadId GetCurrentProcessId GetTickCount64 GetSystemInfo GetConsoleWindow HeapReAlloc FormatMessageW GetLastError CloseHandle HeapAlloc HeapFree GetProcessHeap InitializeSListHead GetComputerNameExW GetTempPathA GetFileInformationByHandleEx IsDebuggerPresent

advapi32

RegQueryValueExW SystemFunction036 RegOpenKeyExW RegCloseKey

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ws2_32

WSAStartup closesocket WSACleanup WSASend recv bind getaddrinfo freeaddrinfo send WSASocketW WSAIoctl ioctlsocket getsockopt setsockopt shutdown getsockname WSAGetLastError getpeername connect

ntdll

NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtWriteFile NtReadFile NtOpenFile

bcrypt

BCryptGenRandom

secur32

DeleteSecurityContext EncryptMessage FreeContextBuffer AcceptSecurityContext InitializeSecurityContextW ApplyControlToken DecryptMessage FreeCredentialsHandle QueryContextAttributesW AcquireCredentialsHandleA

bcryptprimitives

ProcessPrng

user32

GetDC ReleaseDC GetWindowRect GetDesktopWindow ShowWindow

gdi32

GetDeviceCaps

shell32

ShellExecuteW

vcruntime140

memcpy __CxxFrameHandler3 memcmp memmove __C_specific_handler memset __current_exception __current_exception_context memchr strchr strrchr

api-ms-win-crt-string-l1-1-0

strcspn strncmp strcmp strspn strlen

api-ms-win-crt-math-l1-1-0

log2 pow log fabs __setusermatherr _dclass

api-ms-win-crt-heap-l1-1-0

realloc free _set_new_mode _msize malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _get_initial_narrow_environment _initterm _initterm_e _set_app_type exit _exit _crt_atexit _seh_filter_exe _endthreadex __p___argc __p___argv _cexit _beginthreadex _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale