72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543

General

Target
72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543
Size 2.8MB
Sample260807-h4bzzazcmd
SHA256 72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543
MD5 9a331c1e0627cf2905fa262d141fc8aa
SHA1 d6a949324969f81cf2c8f533882b1c5dc468e74a
SHA512 f105ae2e619fa4a486c4cb637f26c0fd0019be6ac3a50e38cb816afd497368a0c1794b25e29a4b0d6cf4f50bde520216a967eb8db4e7df83dcbf569bda4b148a
SSDEEP 49152:thuXz+rCdsGNUitwLme+eHBCeY34Py8wYK1q1y:thuj+rCdsGeitwLmvh3zC8
TLSH
T194D56B50AEDAD5F6D942373444E2E1AF166895077B7DFBE38934A729AC3F040092BBD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543

File Explorer

72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543

.exe 2.8MB

72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543
MD5 9a331c1e0627cf2905fa262d141fc8aa
SHA1 d6a949324969f81cf2c8f533882b1c5dc468e74a
SHA512 f105ae2e619fa4a486c4cb637f26c0fd0019be6ac3a50e38cb816afd497368a0c1794b25e29a4b0d6cf4f50bde520216a967eb8db4e7df83dcbf569bda4b148a
SSDEEP 49152:thuXz+rCdsGNUitwLme+eHBCeY34Py8wYK1q1y:thuj+rCdsGeitwLmvh3zC8
TLSH
T194D56B50AEDAD5F6D942373444E2E1AF166895077B7DFBE38934A729AC3F040092BBD0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e1:47:7b:d3:c9:c8:94:d3:61:18:09:e6:cf:73:37:42:62:3f:aa:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=mapcarta.com

Chains

Aug 6, 2026

CN=mapcarta.com

Minor OS version

1

Major OS version

6

Entry point

367088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

69KB

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

988B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543

PE Signature issue

kernel32

generic