needle[.]exe | Triage™

Resubmissions

20/08/2026, 16:23

260820-tvs3nsfl8t6

20/08/2026, 16:18

260820-tr8c7aed956

Sharing

Copy URL Twitter E-mail

General

Target
needle.exe
Size 14.2MB
Sample260820-tr8c7aed95
SHA256 1300aa083572c67178e041591e04abc9298973bd7ee9e874be049335f6a3cc67
MD5 2a9e208debde271a0acbae1ec8682f58
SHA1 f1f766b417a819b477dca9017f0226f4b7e783bc
SHA512 39b4c5f9e2af367d0e37be385bb39fa190b4b4f1ff2436e97598e7e6680a7092991372d4fd16020e3ac8324993843fa6c189df1af42a36b2c9d982742a945c1a
SSDEEP 393216:T2PV+Sp8C3vzohJhGgS66FtNiQg1Qvj8Gxcp:T29/mC3vMjQ6caQ6Sj
TLSH
T169E62357E33D95A5EBE6803802475D739E21B04A332065EB13E8D1603FAEFE53A79316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
needle.exe

File Explorer

needle.exe

.exe 14.2MB

needle.exe

IMPHASH 793a4dcb05e662be5393a5adeae28bd3
SHA256 1300aa083572c67178e041591e04abc9298973bd7ee9e874be049335f6a3cc67
MD5 2a9e208debde271a0acbae1ec8682f58
SHA1 f1f766b417a819b477dca9017f0226f4b7e783bc
SHA512 39b4c5f9e2af367d0e37be385bb39fa190b4b4f1ff2436e97598e7e6680a7092991372d4fd16020e3ac8324993843fa6c189df1af42a36b2c9d982742a945c1a
SSDEEP 393216:T2PV+Sp8C3vzohJhGgS66FtNiQg1Qvj8Gxcp:T29/mC3vMjQ6caQ6Sj
TLSH
T169E62357E33D95A5EBE6803802475D739E21B04A332065EB13E8D1603FAEFE53A79316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

550544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup accept bind closesocket htonl htons listen recv send setsockopt socket

kernel32

AcquireSRWLockExclusive CloseHandle DeleteCriticalSection EnterCriticalSection FlsAlloc FlsSetValue GetCurrentProcess GetLastError GetLogicalProcessorInformationEx GetSystemInfo InitializeCriticalSection K32GetProcessMemoryInfo LeaveCriticalSection QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObjectEx WakeAllConditionVariable __C_specific_handler

api-ms-win-crt-convert-l1-1-0

_strtod_l _strtoi64_l _strtoui64_l atof atoi mbrtowc mbsrtowcs strtod strtof wcrtomb wcrtomb_s

api-ms-win-crt-environment-l1-1-0

__p__environ getenv

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _set_new_mode calloc free malloc realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr lroundf powf

api-ms-win-crt-private-l1-1-0

memchr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __sys_nerr _beginthreadex _cexit _configure_narrow_argv _crt_atexit _errno _exit _initialize_narrow_environment _initterm _initterm_e _register_thread_local_exe_atexit_callback _set_app_type _set_invalid_parameter_handler abort exit signal strerror_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf _fseeki64 _ftelli64 fclose fflush fopen fputc fread fwrite putchar puts setbuf

api-ms-win-crt-string-l1-1-0

_isctype_l _strdup mbrlen strcmp strncmp tolower toupper wcslen

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func __pctype_func _configthreadlocale _create_locale _free_locale localeconv setlocale

api-ms-win-crt-time-l1-1-0

_strftime_l

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

Name

.text

Size

887KB

Virtual Size

887KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

13.1MB

Virtual Size

13.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

needle.exe

ws2_32

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

generic