Resubmissions

10/08/2026, 12:19

260810-phay4sgr9z

10/08/2026, 12:10

260810-pb8a2agq9w7

General

  • Target
    Phosgene.exe
  • Size 22.5MB
  • Sample260810-phay4sgr9z
  • SHA256 f1006c06d7ffd4f8236c3a95f857dcb148759872aefaeca14c0982a0037618e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Phosgene.exe
    .exe 22.5MB

Phosgene.exe

  • IMPHASH a8f9817be32c1d5589680a5066ebff5d
  • SHA256 f1006c06d7ffd4f8236c3a95f857dcb148759872aefaeca14c0982a0037618e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths