build-client-1792184016280-kvrd1aw-1792184020285[.]exe

Resubmissions

16/10/2026, 21:35

261016-1ffmcsdz3x

16/10/2026, 21:34

261016-1e1k5sdz2w3

Sharing

Copy URL Twitter E-mail

General

Target
build-client-1792184016280-kvrd1aw-1792184020285.exe
Size 30.5MB
Sample261016-1ffmcsdz3x
SHA256 0e3efb5d365668f3d0613b10989f29087b8f9f420f129aeaf436ce6a169987a5
MD5 d58788b5fcd3a95082681de537ea6843
SHA1 540c6f68dc90bf18e3250441b02723a727d5c92d
SHA512 7538df4b0e940ccfa5c5d3cefbbfd9e08d7fe1d9214be52d1dba6caff70fd1e5bae6a2089e2920fe27bf87f45113dd02d5f76437841ae35dfe71ae00fafbe93c
SSDEEP 786432:vo8rIKJ0cZWtlO5dV0kPaTgn7aWfBS4a7:g8rxRWtQYkyTQ7aWpS
TLSH
T1E567334153A697BEC0D3567D38CA02AA31C03C7FD8FECA696CC7D80279A8C56489F576
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
build-client-1792184016280-kvrd1aw-1792184020285.exe

File Explorer

build-client-1792184016280-kvrd1aw-1792184020285.exe

.exe 30.5MB

build-client-1792184016280-kvrd1aw-1792184020285.exe

IMPHASH 35e242c2f6940c6d0fa4f5556bd77900
SHA256 0e3efb5d365668f3d0613b10989f29087b8f9f420f129aeaf436ce6a169987a5
MD5 d58788b5fcd3a95082681de537ea6843
SHA1 540c6f68dc90bf18e3250441b02723a727d5c92d
SHA512 7538df4b0e940ccfa5c5d3cefbbfd9e08d7fe1d9214be52d1dba6caff70fd1e5bae6a2089e2920fe27bf87f45113dd02d5f76437841ae35dfe71ae00fafbe93c
SSDEEP 786432:vo8rIKJ0cZWtlO5dV0kPaTgn7aWfBS4a7:g8rxRWtQYkyTQ7aWpS
TLSH
T1E567334153A697BEC0D3567D38CA02AA31C03C7FD8FECA696CC7D80279A8C56489F576
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42206400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

crypt32

CryptStringToBinaryA

ws2_32

recv

ole32

CoInitializeEx

iphlpapi

GetAdaptersAddresses

gdiplus

GdiplusStartup

winhttp

WinHttpOpenRequest

d3d11

D3D11CreateDevice

d3dcompiler_43

D3DCompile

kernel32

GetWindowsDirectoryW GetSystemTimeAsFileTime HeapAlloc HeapFree ExitProcess GetModuleHandleA LoadLibraryA GetProcAddress

user32

DestroyWindow

gdi32

GetDeviceCaps

advapi32

GetTokenInformation

shell32

SHGetFolderPathA

oleaut32

VariantInit

imm32

ImmSetCompositionWindow

msvcp140

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

shlwapi

SHDeleteKeyW

dcomp

DCompositionCreateDevice

ntdll

RtlLookupFunctionEntry

tbs

Tbsi_GetDeviceInfo

netapi32

NetApiBufferFree

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

_setmode

api-ms-win-crt-time-l1-1-0

_gmtime64_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-runtime-l1-1-0

_cexit

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-environment-l1-1-0

getenv

normaliz

IdnToAscii

bcrypt

BCryptGenRandom

wldap32

ord33

Name

.text

Size

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

17.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.NX<

Size

Virtual Size

7.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

./J#

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.][C

Size

30.5MB

Virtual Size

30.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

469B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

build-client-1792184016280-kvrd1aw-1792184020285.exe

crypt32

ws2_32

ole32

iphlpapi

gdiplus

winhttp

d3d11

d3dcompiler_43

kernel32

user32

gdi32

advapi32

shell32

oleaut32

imm32

msvcp140

shlwapi

dcomp

ntdll

tbs

netapi32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

normaliz

bcrypt

wldap32

generic