PsychEngine[.]exe | Triage™

Resubmissions

02/08/2026, 19:36

260802-ya81ls1ale

02/08/2026, 19:34

260802-x933zawxew3

Sharing

Copy URL Twitter E-mail

General

Target
PsychEngine.exe
Size 29.3MB
Sample260802-ya81ls1ale
SHA256 3ea88afe47de956e589ead9b274d7ba2d945ef618f07ee252dd4f78b762704d5
MD5 0597ee0b8bbce2d6ef2d1578fd09a2cc
SHA1 171ad26e091e3f131c43ae65b38d80a08f3d5278
SHA512 1f5c399dbdebb404fc59d4e1911dc27e14fe9f7a4f87c5196990009d2677431c88664dafd8e7e8a05d348e92f7b44fae1f73a339ab75f33fcbe006be8674fab9
SSDEEP 196608:ZdLOL7r67DHscXhANqdPi+KKpVjSWL3nAnUoULsG4MsmFsFnu:ZdL7DMcX+NqdPiXyDTn0UoULsGts
TLSH
T124674BDAB139CCD5F066E078A60A990EE2A27878571177EF0C9226416F7FDD43B39720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PsychEngine.exe

File Explorer

PsychEngine.exe

.exe 29.3MB

PsychEngine.exe

IMPHASH 3e43d570ddc41ce04b037ad2ef2985f5
SHA256 3ea88afe47de956e589ead9b274d7ba2d945ef618f07ee252dd4f78b762704d5
MD5 0597ee0b8bbce2d6ef2d1578fd09a2cc
SHA1 171ad26e091e3f131c43ae65b38d80a08f3d5278
SHA512 1f5c399dbdebb404fc59d4e1911dc27e14fe9f7a4f87c5196990009d2677431c88664dafd8e7e8a05d348e92f7b44fae1f73a339ab75f33fcbe006be8674fab9
SSDEEP 196608:ZdLOL7r67DHscXhANqdPi+KKpVjSWL3nAnUoULsG4MsmFsFnu:ZdL7DMcX+NqdPiXyDTn0UoULsGts
TLSH
T124674BDAB139CCD5F066E078A60A990EE2A27878571177EF0C9226416F7FDD43B39720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23178608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxA SetProcessDPIAware IsWindowVisible GetWindow GetWindowThreadProcessId GetDC ReleaseDC GetClientRect FillRect EnumWindows

ws2_32

WSAStartup gethostbyname socket shutdown setsockopt WSAGetLastError send getaddrinfo freeaddrinfo closesocket connect ioctlsocket htons inet_addr inet_ntoa recv

advapi32

CryptAcquireContextA RegCreateKeyExW RegOpenKeyExW RegQueryValueExW CryptGenRandom CryptReleaseContext RegCloseKey RegSetKeyValueW

gdi32

GetStockObject

crypt32

CertEnumCertificatesInStore CertOpenSystemStoreA CertCloseStore

libvlc

libvlc_audio_get_channel libvlc_audio_get_delay libvlc_audio_get_track libvlc_audio_get_track_count libvlc_audio_set_callbacks libvlc_audio_set_channel libvlc_audio_set_delay libvlc_audio_set_format_callbacks libvlc_audio_set_track libvlc_audio_set_volume_callback libvlc_clock libvlc_errmsg libvlc_event_attach libvlc_get_changeset libvlc_get_compiler libvlc_get_version libvlc_media_add_option libvlc_media_event_manager libvlc_media_get_duration libvlc_media_get_meta libvlc_media_get_mrl libvlc_media_list_count libvlc_media_list_item_at_index libvlc_media_list_release libvlc_media_new_callbacks libvlc_media_new_fd libvlc_media_new_location libvlc_media_new_path libvlc_media_parse_stop libvlc_media_parse_with_options libvlc_media_player_can_pause libvlc_media_player_event_manager libvlc_media_player_get_chapter libvlc_media_player_get_chapter_count libvlc_media_player_get_length libvlc_media_player_get_media libvlc_media_player_get_position libvlc_media_player_get_rate libvlc_media_player_get_role libvlc_media_player_get_time libvlc_media_player_is_playing libvlc_media_player_is_seekable libvlc_media_player_new libvlc_media_player_next_chapter libvlc_media_player_pause libvlc_media_player_play libvlc_media_player_previous_chapter libvlc_media_player_release libvlc_media_player_set_chapter libvlc_media_player_set_media libvlc_media_player_set_pause libvlc_media_player_set_position libvlc_media_player_set_rate libvlc_media_player_set_role libvlc_media_player_set_time libvlc_media_player_stop libvlc_media_player_will_play libvlc_media_release libvlc_media_save_meta libvlc_media_set_meta libvlc_media_subitems libvlc_new libvlc_release libvlc_video_get_size libvlc_video_set_callbacks libvlc_video_set_format_callbacks

kernel32

GetACP IsValidCodePage GetFileAttributesExW SetEnvironmentVariableW GetFileSizeEx SetFilePointerEx GetConsoleOutputCP FlushFileBuffers ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID FreeEnvironmentStringsW GetLocaleInfoW LCMapStringW CompareStringW GetOEMCP GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation HeapAlloc HeapFree OutputDebugStringW FindFirstFileExW GetCommandLineA GetProcessHeap GetTimeFormatW GetEnvironmentStringsW HeapSize SetEndOfFile IsValidLocale LoadLibraryW HeapReAlloc WriteConsoleW GetStdHandle MoveFileExW DeleteFileW RemoveDirectoryW CreateDirectoryW SetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree InitializeCriticalSectionAndSpinCount RtlPcToFileHeader InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry GetCPInfo GetStringTypeW GetModuleHandleW GetSystemTimeAsFileTime GetTempPathW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetNativeSystemInfo TlsGetValue GetCurrentProcessId QueryPerformanceCounter QueryPerformanceFrequency GetSystemTime SystemTimeToFileTime RtlCaptureContext TlsSetValue TlsAlloc CloseHandle InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent WaitForSingleObject CreateEventA CreateThread GetCurrentThreadId FreeLibrary GetProcAddress RtlUnwind GetCommandLineW LoadLibraryA ReadFile WriteFile DuplicateHandle CreatePipe GetCurrentProcess TerminateProcess GetExitCodeProcess CreateProcessW FormatMessageA SetCurrentDirectoryW GetCurrentDirectoryW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFullPathNameW Sleep GetModuleFileNameW lstrlenW MultiByteToWideChar CreateFileW GetLastError PeekNamedPipe WaitNamedPipeW WideCharToMultiByte RtlUnwindEx RaiseException SetLastError VirtualFree VirtualQuery GetModuleHandleA LoadLibraryExA GetModuleFileNameA GetModuleHandleExA VirtualAlloc VirtualProtect

Name

.text

Size

22.5MB

Virtual Size

22.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.5MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

583KB

Virtual Size

582KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

458KB

Virtual Size

458KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

422KB

Virtual Size

422KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

PsychEngine.exe

user32

ws2_32

advapi32

gdi32

crypt32

libvlc

kernel32

generic