717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0

Resubmissions

07/08/2026, 11:35

260807-np26hathkf7

07/08/2026, 11:20

260807-nffadatfja8

Sharing

Copy URL Twitter E-mail

General

Target
717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0
Size 31.5MB
Sample260807-nffadatfja
SHA256 717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0
MD5 1aa52744edc91d951e76bb21b0d335fd
SHA1 34b30fa786eaae43084781660b7fc547db015dd5
SHA512 65f7ddf303613e40fb7a0ae6d864f046bf5f71496f440aa8c695f2220e6bd3867bdb949ce34d04e8ec0f8778f21d7efc68d37dc57d381680de20fdec34e800ec
SSDEEP 786432:tU0m7m5/hBbYWrTvmR0RNMaHDJTJ0mqahJJE:i0m7k/hBTTvmCRl3FqahJJ
TLSH
T151771205B265846CC2727333A853EF12D676F0554B3DC1F7A7B3591E2ED2BAC1EA8242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0

File Explorer

717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0

.exe 31.5MB

717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0

IMPHASH 6fb947215ee264674e32b848df8637f4
SHA256 717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0
MD5 1aa52744edc91d951e76bb21b0d335fd
SHA1 34b30fa786eaae43084781660b7fc547db015dd5
SHA512 65f7ddf303613e40fb7a0ae6d864f046bf5f71496f440aa8c695f2220e6bd3867bdb949ce34d04e8ec0f8778f21d7efc68d37dc57d381680de20fdec34e800ec
SSDEEP 786432:tU0m7m5/hBbYWrTvmR0RNMaHDJTJ0mqahJJE:i0m7k/hBTTvmCRl3FqahJJ
TLSH
T151771205B265846CC2727333A853EF12D676F0554B3DC1F7A7B3591E2ED2BAC1EA8242
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1030272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\axon services\controller\x64\Release\AxonController.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile D3DReflect

xinput1_4

ord2

dinput8

DirectInput8Create

winhttp

WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen WinHttpReceiveResponse WinHttpSetOption WinHttpReadData WinHttpSetTimeouts WinHttpCloseHandle WinHttpQueryDataAvailable WinHttpCrackUrl WinHttpConnect WinHttpOpenRequest WinHttpSendRequest

iphlpapi

IcmpCreateFile IcmpCloseHandle IcmpSendEcho

bcrypt

BCryptFinishHash BCryptHashData BCryptCreateHash BCryptOpenAlgorithmProvider BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptGetProperty

kernel32

FreeLibrary QueryPerformanceCounter OutputDebugStringA GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock SizeofResource LockResource LoadResource FindResourceW GetModuleHandleW GetCurrentProcess TerminateProcess WaitForSingleObject OpenProcess CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW CloseHandle CreateProcessA GetExitCodeProcess CreateDirectoryW GetModuleFileNameA QueryDosDeviceW CompareFileTime GetFileAttributesExA FindFirstFileA SetWaitableTimer CreateWaitableTimerW WriteFile DeviceIoControl GetDriveTypeA GetModuleFileNameW FindNextFileA SetThreadPriority GetEnvironmentVariableW GetTempPathW CreateMutexW GetEnvironmentVariableA FindClose GetVolumeInformationA CreateFileW GetFileAttributesW GetCurrentThreadId ReleaseMutex Sleep GetTempPathA GetTickCount64 GetFileAttributesA GetFileAttributesExW MoveFileExA GetCurrentThread DeleteFileA DeleteFileW GetCPInfo LoadLibraryW CreateThread MoveFileExW GetCurrentProcessId SystemTimeToFileTime GlobalMemoryStatusEx GetProcAddress IsDBCSLeadByte CreateWaitableTimerExW GetTickCount GetComputerNameA FreeLibraryAndExitThread ExitThread ReadFile DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetExitCodeThread WaitForSingleObjectEx GetModuleHandleExW InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive QueryPerformanceFrequency LoadLibraryA GetFileType ExitProcess GetStdHandle IsProcessorFeaturePresent MultiByteToWideChar GetLocaleInfoA HeapAlloc HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetFilePointerEx GetConsoleMode GetACP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap ReadConsoleW VirtualProtect LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetFileSizeEx GetTimeZoneInformation HeapReAlloc SetStdHandle FindFirstFileExW GetStringTypeW IsValidCodePage CreateDirectoryA HeapSize WriteConsoleW FindNextFileW GetSystemTime GetOEMCP SetEndOfFile GetSystemInfo RtlUnwind

user32

UnregisterClassW MessageBeep RegisterClassExW ShowWindow GetAsyncKeyState GetRawInputDeviceInfoW DispatchMessageW GetMonitorInfoW SendMessageW GetRawInputData GetDoubleClickTime AttachThreadInput MapVirtualKeyA SetLayeredWindowAttributes BringWindowToTop FillRect SetWindowRgn GetSystemMetrics PeekMessageW CreateWindowExW MonitorFromRect SetWindowPos DestroyWindow GetWindowRect GetMessageW GetWindowThreadProcessId RegisterRawInputDevices TranslateMessage LoadIconW FindWindowW SetWindowLongW SystemParametersInfoA UpdateLayeredWindow PostQuitMessage GetDesktopWindow SystemParametersInfoW UpdateWindow IsIconic SendInput OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData DefWindowProcW GetKeyState GetMessageExtraInfo GetDC ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos ReleaseDC GetCursorPos GetWindowLongW SetForegroundWindow

gdi32

DeleteObject SetBrushOrgEx BitBlt CreateCompatibleBitmap SelectObject CreateDIBSection CreateCompatibleDC GetStockObject CreateRoundRectRgn GetDIBits DeleteDC LineTo CreatePen Rectangle GetObjectW MoveToEx Ellipse SetStretchBltMode CreateSolidBrush

advapi32

OpenSCManagerW ControlService RegSetValueExA OpenProcessToken StartServiceW RegOpenKeyExA RegDeleteKeyValueA QueryServiceConfigW ChangeServiceConfigW OpenServiceW QueryServiceStatusEx GetTokenInformation RegQueryValueExA CloseServiceHandle RegCloseKey RegDeleteValueW RegOpenKeyExW RegSetValueExW RegCreateKeyExA

shell32

ShellExecuteW ShellExecuteA

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

winmm

timeBeginPeriod waveOutPrepareHeader waveOutOpen waveOutClose timeEndPeriod waveOutUnprepareHeader waveOutWrite

msimg32

AlphaBlend

setupapi

CM_Get_Parent SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiGetDeviceInterfaceDetailW CM_Locate_DevNodeW SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList CM_Get_Device_IDW

hid

HidD_GetHidGuid

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13.0MB

Virtual Size

13.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

36KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17.2MB

Virtual Size

17.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

717c38d12da5c6a1aa85229137db28590f87998663b0602694817e782b3e3bb0

d3d11

d3dcompiler_47

xinput1_4

dinput8

winhttp

iphlpapi

bcrypt

kernel32

user32

gdi32

advapi32

shell32

dwmapi

imm32

winmm

msimg32

setupapi

hid

generic