imgui1[.]exe | Triage™

Resubmissions

24/08/2026, 18:06

260824-wpv17aed68

24/08/2026, 18:04

260824-wn3dwaar7w8

Sharing

Copy URL Twitter E-mail

General

Target
imgui1.exe
Size 2.3MB
Sample260824-wpv17aed68
SHA256 f9cb1ed24fc5495ef16e0017d4399fa474bd45e7cf244d3e719ce8fe3965ef78
MD5 4d6afafc755da48d461e6ff4340c328b
SHA1 313e6fb7596c8d0a81c1c13d032aac1417b82175
SHA512 0ec47e149a1ae1d52719632dc21648188005dbfd663b98857f3ab7b8b2c264fe8554dadfb6dc2ebc097c8bed32f263cf915e5e78921edd026c85947a785fec48
SSDEEP 49152:qANRpkzyDLMaGz5C5NmKM/txyzb44ecjFOzwcPSOaF4zpm9HyjB:RNwzSLMDC5NmhxyzjjFOcczpkHGB
TLSH
T1C6B502759A6C02ACE176C1F8CA575D07EB72B8830361A9EB03919EF30F279D5593EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
imgui1.exe

File Explorer

imgui1.exe

.exe 2.3MB

imgui1.exe

IMPHASH f7cc2c155f469ebb0b1d4e6f709ca8a9
SHA256 f9cb1ed24fc5495ef16e0017d4399fa474bd45e7cf244d3e719ce8fe3965ef78
MD5 4d6afafc755da48d461e6ff4340c328b
SHA1 313e6fb7596c8d0a81c1c13d032aac1417b82175
SHA512 0ec47e149a1ae1d52719632dc21648188005dbfd663b98857f3ab7b8b2c264fe8554dadfb6dc2ebc097c8bed32f263cf915e5e78921edd026c85947a785fec48
SSDEEP 49152:qANRpkzyDLMaGz5C5NmKM/txyzb44ecjFOzwcPSOaF4zpm9HyjB:RNwzSLMDC5NmhxyzjjFOcczpkHGB
TLSH
T1C6B502759A6C02ACE176C1F8CA575D07EB72B8830361A9EB03919EF30F279D5593EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

220460

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

recv freeaddrinfo setsockopt connect socket send WSAStartup getaddrinfo shutdown closesocket WSACleanup WSAGetLastError ioctlsocket getsockopt select __WSAFDIsSet

bcrypt

BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider BCryptDecrypt BCryptGetProperty BCryptDestroyKey BCryptEncrypt BCryptGenerateSymmetricKey

gdiplus

GdipFree GdipDisposeImage GdipCreateBitmapFromHBITMAP GdipAlloc GdipCloneImage GdipGetImageEncoders GdiplusStartup GdipCreateBitmapFromScan0 GdipGetImageEncodersSize GdipSaveImageToStream

ole32

CreateStreamOnHGlobal CoInitializeEx CoUninitialize

iphlpapi

GetAdaptersInfo

shell32

SHGetFolderPathA SHCreateDirectoryExA ShellExecuteA

advapi32

ControlService OpenProcessToken LookupPrivilegeValueA CreateProcessAsUserA CreateServiceA StartServiceCtrlDispatcherA QueryServiceStatus CloseServiceHandle SetServiceStatus RegisterServiceCtrlHandlerA OpenSCManagerA DeleteService AdjustTokenPrivileges StartServiceA ChangeServiceConfig2A OpenServiceA RegCloseKey RegOpenKeyExA RegDeleteValueA GetTokenInformation GetUserNameA DuplicateTokenEx

user32

ReleaseDC GetSystemMetrics GetDC ShowWindow ExitWindowsEx TranslateMessage UnhookWindowsHookEx GetForegroundWindow ToUnicodeEx GetKeyboardLayout SetWindowsHookExA GetKeyboardState PeekMessageA CallNextHookEx DestroyWindow IsWindow SendMessageA GetWindowThreadProcessId DispatchMessageA

gdi32

CreateCompatibleBitmap SelectObject CreateCompatibleDC DeleteDC DeleteObject BitBlt

crypt32

CryptUnprotectData CryptStringToBinaryA CryptBinaryToStringA

wininet

InternetReadFile InternetCloseHandle InternetOpenUrlA InternetOpenA

wtsapi32

WTSQueryUserToken

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

avicap32

capGetDriverDescriptionA capCreateCaptureWindowA

kernel32

GetFileSizeEx UnhandledExceptionFilter SetFilePointerEx GetFileType RtlVirtualUnwind RtlCaptureContext GetCommandLineW GetCommandLineA CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc FindFirstFileExW FindNextFileW IsValidCodePage GetACP FlushFileBuffers GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW HeapSize TerminateProcess GetModuleFileNameW GetStdHandle IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetConsoleOutputCP GetConsoleMode HeapFree HeapAlloc VirtualProtect LoadLibraryExW GetOEMCP GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCPInfo GetStringTypeW GetSystemTimePreciseAsFileTime SleepConditionVariableSRW WakeAllConditionVariable LCMapStringEx MultiByteToWideChar DecodePointer EncodePointer SetEndOfFile WriteConsoleW GetConsoleWindow GetModuleFileNameA GetCurrentProcess WriteFile WaitForSingleObject Sleep GetTempPathA GetFileAttributesA CreateFileA DeleteFileA CloseHandle FreeConsole SetFileAttributesA WTSGetActiveConsoleSessionId ExitProcess GetCurrentProcessId RtlUnwind CreateProcessA GetTempFileNameA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection Process32First GetModuleHandleA CreateToolhelp32Snapshot QueryPerformanceFrequency Process32Next GetProcAddress GlobalMemoryStatusEx QueryPerformanceCounter IsDebuggerPresent CheckRemoteDebuggerPresent GetNativeSystemInfo GetComputerNameA ReadFile SetHandleInformation CreatePipe WideCharToMultiByte FindFirstFileExA GetDriveTypeA FindNextFileA FindClose FileTimeToSystemTime GetLogicalDriveStringsA GetDiskFreeSpaceExA CopyFileA RemoveDirectoryA SetErrorMode TerminateThread FindFirstFileA GetEnvironmentVariableA LocalFree SetDllDirectoryA LoadLibraryA GetFileSize FreeLibrary GetLastError GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeCriticalSectionEx

Name

.text

Size

375KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

imgui1.exe

ws2_32

bcrypt

gdiplus

ole32

iphlpapi

shell32

advapi32

user32

gdi32

crypt32

wininet

wtsapi32

userenv

avicap32

kernel32

generic