1k07h35[.]exe | Triage™

Resubmissions

30/07/2026, 21:44

260730-1lxsts1scv3

30/07/2026, 21:41

260730-1j76sa1sav8

Sharing

Copy URL Twitter E-mail

General

Target
1k07h35.exe
Size 4.1MB
Sample260730-1j76sa1sav
SHA256 0dba6de77435683a9e052f2a5c4e0603ccac3d552fa37f950d9ecc4bdf12956e
MD5 5619c4764ee93c294720e2f6d0851cdd
SHA1 9daf2df7e2ec57e12968ab0b66b733c83a794db7
SHA512 decb405e34908d44cea3ba78211b7ea15cdd5627ab79a1d74e3c78ca256fdd24c78f701417983f510787326cdc6c0a9ece115b961f9791a356a55b8e95f6f19a
SSDEEP 49152:TnETDnEuURZih5VL3dD/DlqwV+212ZLWkvFA51opzj0a3SP0FBnu8/LhUu0F4CeI:TGHUR8rVLZ6jp33SPHkU/4fZ2
TLSH
T10E169D5BB7B800E9D077C17E865A4757EB71B4040720A7DF15D886A92F23EE21EBE324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1k07h35.exe

File Explorer

1k07h35.exe

.exe 4.1MB

1k07h35.exe

IMPHASH 7a9c9564f96abee0e10033cc2d271bd1
SHA256 0dba6de77435683a9e052f2a5c4e0603ccac3d552fa37f950d9ecc4bdf12956e
MD5 5619c4764ee93c294720e2f6d0851cdd
SHA1 9daf2df7e2ec57e12968ab0b66b733c83a794db7
SHA512 decb405e34908d44cea3ba78211b7ea15cdd5627ab79a1d74e3c78ca256fdd24c78f701417983f510787326cdc6c0a9ece115b961f9791a356a55b8e95f6f19a
SSDEEP 49152:TnETDnEuURZih5VL3dD/DlqwV+212ZLWkvFA51opzj0a3SP0FBnu8/LhUu0F4CeI:TGHUR8rVLZ6jp33SPHkU/4fZ2
TLSH
T10E169D5BB7B800E9D077C17E865A4757EB71B4040720A7DF15D886A92F23EE21EBE324
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

BeginPaint CreateIconIndirect CreateWindowExW DefWindowProcW DestroyIcon DestroyWindow DispatchMessageW DrawFocusRect DrawTextW EnableWindow EndPaint EnumWindows FillRect GetClientRect GetDC GetMessageW GetSystemMetrics GetWindowTextW GetWindowThreadProcessId InflateRect InvalidateRect IsWindow IsWindowVisible KillTimer LoadCursorW MessageBoxW MoveWindow OffsetRect PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageW SetProcessDPIAware SetTimer SetWindowRgn SetWindowTextW ShowWindow TranslateMessage UnregisterClassW UpdateWindow wsprintfW

gdi32

BitBlt CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateFontW CreatePen CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject GetStockObject PatBlt Polygon RoundRect SelectObject SetBkColor SetBkMode SetTextColor

shell32

SHGetFolderPathW

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-private-l1-1-0

__C_specific_handler strstr wcsrchr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vswprintf fwrite

api-ms-win-crt-string-l1-1-0

_strnicmp _wcsicmp strlen strncmp towlower wcslen

kernel32

CloseHandle CompareFileTime CreateDirectoryW CreateFileW CreatePipe CreateProcessW CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW EnterCriticalSection FindClose FindFirstFileW FindNextFileW FlushFileBuffers GetCurrentProcessId GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesExW GetFileAttributesW GetLastError GetModuleFileNameW GetProcessTimes GetStartupInfoA GetTempPathW GetTickCount GetTickCount64 InitializeCriticalSection LeaveCriticalSection Module32FirstW Module32NextW MoveFileExW OpenProcess QueryFullProcessImageNameW ReadFile RemoveDirectoryW SetHandleInformation SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcatW lstrcpynW lstrlenW

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

Name

.text

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

900B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

1k07h35.exe

user32

gdi32

shell32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

generic