HAHAware[.]exe | Triage™

Resubmissions

26/08/2026, 16:48

260826-vbhm9szxdy6

26/08/2026, 16:46

260826-vad9fssfpd6

Sharing

Copy URL Twitter E-mail

General

Target
HAHAware.exe
Size 121KB
Sample260826-vad9fssfpd
SHA256 933a2c0b7747b406b0817f2f6cced3ef7344fd86357534864978d5575c002bb3
MD5 dee57a95a963c72094d3076fa8d09b72
SHA1 c658f2b4b5a4984bce2f54be72c09b3e55ecfe80
SHA512 330c044ad1c96ffe5ca9da2ca695f0ebb5438366c80ffe6328bfc92b24c0e746f18aa5cb13e27849b81a3dfb872b645238025667461d8f37eb2736bdf2b3d74b
SSDEEP 768:EFgrNixuBU6KM3Brqi1klLCyEYf7CUTAH13/p9Sbh9Sb:EuNixuBU6K8qakNuYfmgIlpC
TLSH
T101C3D85396EC3CCAC039A3B073BB83D0D72EEC5562A2C18E96D00295D9BD59779327D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HAHAware.exe

File Explorer

HAHAware.exe

.exe 121KB

HAHAware.exe

IMPHASH dda48a41544d89de19d7ffb34d8d2f3d
SHA256 933a2c0b7747b406b0817f2f6cced3ef7344fd86357534864978d5575c002bb3
MD5 dee57a95a963c72094d3076fa8d09b72
SHA1 c658f2b4b5a4984bce2f54be72c09b3e55ecfe80
SHA512 330c044ad1c96ffe5ca9da2ca695f0ebb5438366c80ffe6328bfc92b24c0e746f18aa5cb13e27849b81a3dfb872b645238025667461d8f37eb2736bdf2b3d74b
SSDEEP 768:EFgrNixuBU6KM3Brqi1klLCyEYf7CUTAH13/p9Sbh9Sb:EuNixuBU6K8qakNuYfmgIlpC
TLSH
T101C3D85396EC3CCAC039A3B073BB83D0D72EEC5562A2C18E96D00295D9BD59779327D8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User 11\source\repos\HAHAware\x64\Release\HAHAware.pdb

kernel32

GetFileAttributesW GetEnvironmentVariableW GetModuleFileNameW ExpandEnvironmentStringsW CreateDirectoryW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW RegDeleteValueW RegQueryValueExW

shell32

ShellExecuteW

msvcp140

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?good@ios_base@std@@QEBA_NXZ ?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception _CxxThrowException __C_specific_handler __std_terminate __std_exception_copy __current_exception_context __std_exception_destroy memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _cexit _exit _set_app_type exit __p___argv _register_onexit_function _crt_atexit _seh_filter_exe __p___argc _c_exit _initterm_e _initialize_onexit_table terminate _get_initial_narrow_environment _initterm _wsystem _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

wcslen strlen