6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934[.]bin

Resubmissions

01/09/2026, 16:25

260901-tww6qade847

18/08/2026, 22:30

260818-2e9pgstthw8

Sharing

Copy URL Twitter E-mail

General

Target
6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934.bin
Size 5.5MB
Sample260818-2e9pgstthw
SHA256 6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934
MD5 6699cdad824d4e21964db174cb9622d2
SHA1 6d8bf8874c0ac7dddc63370689cab279f92c9d3e
SHA512 35a83d06e9e66675ca46c3a743ac7b3d3673fea95ca3640556484098c913ed099b5ef18552c5f902352bee77e86e9ea3a851d76d54353453ec7af4dff6e1c028
SSDEEP 98304:NjbltFqoOFYQlOdda0WH8JvwvRhCYAvX:3dG/
TLSH
T182464C05BA6B94ACD15BC47483068A639E2170DF1B36BAFF018486783F6ABF15B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934.bin

File Explorer

6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934.bin

.exe 5.5MB

6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934.bin

IMPHASH 8308f72a4cb5fd67d7f3ce32fdc32584
SHA256 6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934
MD5 6699cdad824d4e21964db174cb9622d2
SHA1 6d8bf8874c0ac7dddc63370689cab279f92c9d3e
SHA512 35a83d06e9e66675ca46c3a743ac7b3d3673fea95ca3640556484098c913ed099b5ef18552c5f902352bee77e86e9ea3a851d76d54353453ec7af4dff6e1c028
SSDEEP 98304:NjbltFqoOFYQlOdda0WH8JvwvRhCYAvX:3dG/
TLSH
T182464C05BA6B94ACD15BC47483068A639E2170DF1B36BAFF018486783F6ABF15B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4437084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

IT_solutions.pdb

crypt32

CertFreeCertificateContext CertCloseStore CertDuplicateCertificateChain CertFreeCertificateChain CertDuplicateCertificateContext CertEnumCertificatesInStore CertDuplicateStore CertAddCertificateContextToStore CertGetCertificateChain CertVerifyCertificateChainPolicy CryptUnprotectData CryptProtectData CryptStringToBinaryA CertCreateCertificateContext CertOpenStore

kernel32

GetUserDefaultGeoName GetLocaleInfoEx GetCurrentThreadId CreateToolhelp32Snapshot Process32NextW Process32FirstW WaitForSingleObject HeapReAlloc CreateThread QueryPerformanceFrequency QueryPerformanceCounter GetSystemInfo GetProcessId GetExitCodeProcess LocalFree OpenProcess GetProcessTimes QueryFullProcessImageNameW TerminateProcess CreateJobObjectW SetInformationJobObject ProcessIdToSessionId FlushFileBuffers MoveFileExW CreateMutexW AssignProcessToJobObject CreatePipe SetHandleInformation CreatePseudoConsole InitializeProcThreadAttributeList UpdateProcThreadAttribute ClosePseudoConsole DeleteProcThreadAttributeList CreateProcessW ResumeThread ResizePseudoConsole WriteFile FindFirstFileExW FindNextFileW GlobalSize GlobalLock GlobalUnlock GlobalAlloc GlobalFree CompareStringOrdinal GetTimeZoneInformationForYear AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetSystemTimePreciseAsFileTime GetQueuedCompletionStatusEx GetOverlappedResult CreateIoCompletionPort SetFileCompletionNotificationModes SetLastError GetFinalPathNameByHandleW CancelIoEx CreateFileW GetModuleHandleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA GetCurrentProcess lstrlenW CreateMutexA WideCharToMultiByte ReleaseMutex GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW WriteFileEx SleepEx ReadFileEx FormatMessageW GetModuleHandleA GetFullPathNameW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW CreateEventW CancelIo GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW GetModuleFileNameW DuplicateHandle WaitForMultipleObjects GetCommandLineW DeleteFileW CopyFileExW CreateWaitableTimerExW SetWaitableTimer Sleep IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException OutputDebugStringA OutputDebugStringW FormatMessageA GetCurrentProcessId GetProcAddress GetLastError GetProcessHeap HeapFree CloseHandle FindClose SwitchToThread TerminateJobObject PostQueuedCompletionStatus GetFileAttributesExW FlushViewOfFile CreateFileA DeleteFileA LoadLibraryW HeapCompact GetFileAttributesA UnlockFile LockFileEx GetDiskFreeSpaceA FreeLibrary GetSystemTimeAsFileTime GetSystemTime CreateFileMappingW MapViewOfFile GetTempPathA HeapSize HeapValidate UnmapViewOfFile GetTempPathW GetTickCount SystemTimeToFileTime UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile AreFileApisANSI HeapCreate HeapDestroy GetDiskFreeSpaceW GetFileSize

user32

SetKeyboardState OpenClipboard GetSystemMetrics GetGUIThreadInfo IsClipboardFormatAvailable GetClipboardData CloseClipboard EmptyClipboard SetClipboardData OpenInputDesktop GetAncestor AttachThreadInput MapVirtualKeyW SendInput ReleaseDC GetDC PrintWindow GetClipboardSequenceNumber SendMessageTimeoutW PostMessageW ScreenToClient SetFocus GetWindowThreadProcessId WindowFromPoint SetForegroundWindow SetActiveWindow GetKeyboardState EnumDesktopWindows SetThreadDesktop CloseDesktop GetClassNameW GetThreadDesktop CreateDesktopW IsWindow IsWindowVisible GetWindowRect

gdi32

StretchBlt SetStretchBltMode DeleteObject DeleteDC SelectObject CreateDIBSection CreateCompatibleDC

iphlpapi

NotifyIpInterfaceChange

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

secur32

InitializeSecurityContextW AcceptSecurityContext FreeContextBuffer QueryContextAttributesW DecryptMessage FreeCredentialsHandle AcquireCredentialsHandleA EncryptMessage ApplyControlToken DeleteSecurityContext

ws2_32

WSAIoctl bind WSAStartup WSACleanup getaddrinfo getsockname getpeername freeaddrinfo recv send WSASend shutdown WSAGetLastError getsockopt connect closesocket ioctlsocket WSASocketW setsockopt

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

ntdll

NtCreateNamedPipeFile NtWriteFile NtDeviceIoControlFile RtlNtStatusToDosError NtReadFile NtOpenFile NtCancelIoFileEx NtCreateFile

vcruntime140

__current_exception __CxxFrameHandler3 memchr memcpy memset memcmp memmove __current_exception_context __C_specific_handler _CxxThrowException strchr strrchr

api-ms-win-crt-math-l1-1-0

log round pow __setusermatherr

api-ms-win-crt-string-l1-1-0

strspn strncmp strcspn strcmp strlen

api-ms-win-crt-heap-l1-1-0

free realloc _set_new_mode malloc _msize

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_c_exit _initterm_e _register_thread_local_exe_atexit_callback _cexit _crt_atexit terminate _register_onexit_function _endthreadex _seh_filter_exe _beginthreadex _configure_narrow_argv _initialize_onexit_table _initialize_narrow_environment _get_initial_narrow_environment exit _exit _initterm __p___argc __p___argv _set_app_type

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale