dropper[.]exe | Triage™

Resubmissions

12/09/2026, 21:27

260912-1a43rsfq21

12/09/2026, 15:21

260912-srbtjszbkd3

Sharing

Copy URL Twitter E-mail

General

Target
dropper.exe
Size 37KB
Sample260912-1a43rsfq21
SHA256 bccf02f685fc753a8c29be00ae2daea0f1f672af04a4ef393b72a4b06dd8ba26
MD5 c5ba98f1e5b7f779a51fe74a19177c3c
SHA1 6e8243c347c220565ac31db0ce57b8001ca7c981
SHA512 f54f7fe2799a9fff237dca756be945481ffbd0db1316ebe1f81183c4bc45da77f41c2ace8e39678a79cd211d29af1e66f4078a35f933862408a0c4b2de9ce4c4
SSDEEP 768:bUKP18ZvOLc0xeRF9KlxxxRaJ763x02Ij:J2F9Klxxx06
TLSH
T14003E75BFBB3C5ECC582E6B8B2E5E772D860FC2A4830562C435053243F966989E7D742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dropper.exe

File Explorer

dropper.exe

.exe 37KB

dropper.exe

IMPHASH e259e53bc2e6df78afc989c38a3675f5
SHA256 bccf02f685fc753a8c29be00ae2daea0f1f672af04a4ef393b72a4b06dd8ba26
MD5 c5ba98f1e5b7f779a51fe74a19177c3c
SHA1 6e8243c347c220565ac31db0ce57b8001ca7c981
SHA512 f54f7fe2799a9fff237dca756be945481ffbd0db1316ebe1f81183c4bc45da77f41c2ace8e39678a79cd211d29af1e66f4078a35f933862408a0c4b2de9ce4c4
SSDEEP 768:bUKP18ZvOLc0xeRF9KlxxxRaJ763x02Ij:J2F9Klxxx06
TLSH
T14003E75BFBB3C5ECC582E6B8B2E5E772D860FC2A4830562C435053243F966989E7D742
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4342

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4findEwy _ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE5rfindEPKwyy _ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE10_M_disposeEv _ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE7reserveEy _ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_appendEPKwy _ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_createERyy _ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_mutateEyyPKwy _ZSt20__throw_length_errorPKc _ZSt24__throw_out_of_range_fmtPKcz _ZdlPvy _Znwy __gxx_personality_seh0

advapi32

GetTokenInformation OpenProcessToken RegCloseKey RegCreateKeyExW RegSetValueExW

kernel32

CheckRemoteDebuggerPresent CloseHandle CreateDirectoryW CreateFileW CreateProcessW CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection FreeLibrary GetComputerNameW GetCurrentProcess GetDiskFreeSpaceExW GetFileAttributesW GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemInfo GetTickCount GetTickCount64 GlobalMemoryStatusEx InitializeCriticalSection IsDebuggerPresent LeaveCriticalSection LoadLibraryA Process32FirstW Process32NextW SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WriteFile

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

api-ms-win-crt-private-l1-1-0

__C_specific_handler memcpy wcsstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv __p__acmdln _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fwrite

api-ms-win-crt-string-l1-1-0

_wcsicmp memset strlen strncmp wcslen

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

api-ms-win-crt-utility-l1-1-0

rand srand

shell32

SHGetFolderPathW ShellExecuteExW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetOption

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

188B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

dropper.exe

libgcc_s_seh-1

libstdc++-6

advapi32

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

shell32

winhttp

generic