ParadoxBetaFree[.]exe

Resubmissions

19/08/2026, 23:03

260819-211npsysdt8

19/08/2026, 23:00

260819-2y95csvfrh6

Sharing

Copy URL Twitter E-mail

General

Target
ParadoxBetaFree.exe
Size 272KB
Sample260819-2y95csvfrh
SHA256 a2c735ff0199bf553dbe5b2c3b60dc83ba6beb8613f03fdc3429abe7fce3e028
MD5 babe34db9103e8096c0699f52bb3543c
SHA1 b6461cfbbec68cef4dba69c3a1cb17fedaf19676
SHA512 af83300b22580c9cc6d74b0466a2bdd94f64116969e7d463cd164645a0ba8699973425a674f15f5434b274f2486085694a10940597a25bbeb6ca8a7e9dc6c434
SSDEEP 3072:055DMiho+1mG8U7mFOkD2qlBVO4aG7Arq/GnzccKkNFTS67Y5aXEV8XFu1M1Ds5/:81ZC2qlBVJaGMpzccFnjFuIxFI6
TLSH
T182548E59F7A41CFAE967857DC9424906EA727C4247B0E6CF13A00BA71F236E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ParadoxBetaFree.exe

File Explorer

ParadoxBetaFree.exe

.exe 272KB

ParadoxBetaFree.exe

IMPHASH 21a1e844699deb0d3bc50b4baf0a53d9
SHA256 a2c735ff0199bf553dbe5b2c3b60dc83ba6beb8613f03fdc3429abe7fce3e028
MD5 babe34db9103e8096c0699f52bb3543c
SHA1 b6461cfbbec68cef4dba69c3a1cb17fedaf19676
SHA512 af83300b22580c9cc6d74b0466a2bdd94f64116969e7d463cd164645a0ba8699973425a674f15f5434b274f2486085694a10940597a25bbeb6ca8a7e9dc6c434
SSDEEP 3072:055DMiho+1mG8U7mFOkD2qlBVO4aG7Arq/GnzccKkNFTS67Y5aXEV8XFu1M1Ds5/:81ZC2qlBVJaGMpzccFnjFuIxFI6
TLSH
T182548E59F7A41CFAE967857DC9424906EA727C4247B0E6CF13A00BA71F236E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SetLayeredWindowAttributes ShowScrollBar GetWindowRect GetAsyncKeyState GetSystemMetrics SetWindowPos MessageBoxA SetWindowLongW GetWindowLongW wsprintfA

shell32

ShellExecuteA

wininet

InternetOpenUrlA InternetReadFile HttpQueryInfoA InternetCloseHandle InternetOpenA

advapi32

CheckTokenMembership AllocateAndInitializeSid FreeSid

kernel32

GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW FindNextFileW FindFirstFileExW HeapSize HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx CreateFileW WriteConsoleW FindClose SetUnhandledExceptionFilter GetStdHandle CreateDirectoryA CreateFileA DeleteFileA RemoveDirectoryA WriteFile CloseHandle WaitForSingleObject Sleep CreateProcessA GetConsoleMode SetConsoleMode ReadConsoleInputW PeekConsoleInputW SetConsoleOutputCP SetConsoleCursorInfo SetConsoleScreenBufferSize SetConsoleWindowInfo SetConsoleTitleW SetCurrentConsoleFontEx GetConsoleWindow QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThreadId WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind GetStartupInfoW GetModuleHandleW ReadFile RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree GetExitCodeProcess CreateProcessW GetFileAttributesExW GetFileType VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP FlushFileBuffers GetConsoleOutputCP

Name

.text

Size

175KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ParadoxBetaFree.exe

user32

shell32

wininet

advapi32

kernel32

generic