Madius[.]Updater[.]exe

Resubmissions

30/08/2026, 23:28

260830-3ggl6asbjf3

30/08/2026, 23:27

260830-3ff91atzcv3

Sharing

Copy URL Twitter E-mail

General

Target
Madius.Updater.exe
Size 23.0MB
Sample260830-3ff91atzcv
SHA256 b4712d9719a40412cd5bcaebf776b8b62a3bd41d75aca1853a8598a5853f48dc
MD5 1af2e461b458942e67c77e6769edcbc1
SHA1 3914299d016c44108bf72dfb1b27de723576fe22
SHA512 7d7a95c66c6e26ede8813efbbf78b0be23eb1b6ae1bd9a91ed615830c1731dbbe2c66b9fd2155f8a010063c43dc01c08984da18ccc3f466cb07c3d3ae0f7dfb8
SSDEEP 393216:YvGin/uqWstHjNL5QVa2AMxZ4HDhNxHdFHbI:YvGimx0NL54+3LxHL
TLSH
T17A3723C578D091ACC862C935E6CB1BF9F0E679894DB9981FBFC609013A30D46CCB6976
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Madius.Updater.exe

File Explorer

Madius.Updater.exe

.exe 23.0MB

Madius.Updater.exe

IMPHASH 9f459e470023747d7050abb08e954c5c
SHA256 b4712d9719a40412cd5bcaebf776b8b62a3bd41d75aca1853a8598a5853f48dc
MD5 1af2e461b458942e67c77e6769edcbc1
SHA1 3914299d016c44108bf72dfb1b27de723576fe22
SHA512 7d7a95c66c6e26ede8813efbbf78b0be23eb1b6ae1bd9a91ed615830c1731dbbe2c66b9fd2155f8a010063c43dc01c08984da18ccc3f466cb07c3d3ae0f7dfb8
SSDEEP 393216:YvGin/uqWstHjNL5QVa2AMxZ4HDhNxHdFHbI:YvGimx0NL54+3LxHL
TLSH
T17A3723C578D091ACC862C935E6CB1BF9F0E679894DB9981FBFC609013A30D46CCB6976
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43379923

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmEnableBlurBehindWindow

crypt32

CertAddCertificateContextToStore

bcrypt

BCryptCloseAlgorithmProvider

kernel32

AcquireSRWLockExclusive

user32

ClientToScreen

shell32

ShellExecuteW

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

msvcp140_atomic_wait

__std_calloc_crt

iphlpapi

GetExtendedTcpTable

d3dcompiler_47

D3DCompile

gdi32

CreateRectRgn

imm32

ImmGetContext

ntdll

NtLoadDriver

ws2_32

WSACleanup

advapi32

CryptAcquireContextA

dbghelp

StackWalk64

vcruntime140

_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

__sys_errlist

api-ms-win-crt-filesystem-l1-1-0

_access

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-string-l1-1-0

_strdup

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-environment-l1-1-0

getenv_s

api-ms-win-crt-utility-l1-1-0

qsort

Name

.text

Size

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

844KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

213KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

328B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.n5u

Size

Virtual Size

14.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.]%8

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.(hX

Size

22.9MB

Virtual Size

22.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Madius.Updater.exe

d3d11

dwmapi

crypt32

bcrypt

kernel32

user32

shell32

msvcp140

msvcp140_atomic_wait

iphlpapi

d3dcompiler_47

gdi32

imm32

ntdll

ws2_32

advapi32

dbghelp

vcruntime140

vcruntime140_1

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-utility-l1-1-0

generic