file[.]exe | Triage™

Resubmissions

29/10/2026, 08:04

261029-jyh2rsbt9j8

20/10/2026, 21:10

261020-zz7dradb938

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 5.3MB
Sample261020-zz7dradb93
SHA256 1a6accff44320788df5d4aaa5befd1aa524ca24715f76155eaf9558b5acdb0d0
MD5 1236a0b4412e4ae779f35ded8b4b3d80
SHA1 1ab741607616717825aea5fbfb2df2771f168e96
SHA512 925db83426378fcc4a405de4b2a79d4acb6de7baa5dbd03f549f75445a58d186fa52ca3ef68ac6c750f10bf84630dfe8ed1eeabeb332acfb4187091685232571
SSDEEP 49152:/YaZtMXw5eWY+IQ+p52Btj1I7x9mW/vutOx2r3JwXvUrxZFzVvL:/dOXmYuCaFC9YGxAqvUrbFxT
TLSH
T1C3469E94CDA62330FBA4A676162B42BA527D92FED7A8F05936A47D130060C1C47FDECD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 5.3MB

file.exe

IMPHASH 21d26c0e67faa5a2a3b3c03932f0908c
SHA256 1a6accff44320788df5d4aaa5befd1aa524ca24715f76155eaf9558b5acdb0d0
MD5 1236a0b4412e4ae779f35ded8b4b3d80
SHA1 1ab741607616717825aea5fbfb2df2771f168e96
SHA512 925db83426378fcc4a405de4b2a79d4acb6de7baa5dbd03f549f75445a58d186fa52ca3ef68ac6c750f10bf84630dfe8ed1eeabeb332acfb4187091685232571
SSDEEP 49152:/YaZtMXw5eWY+IQ+p52Btj1I7x9mW/vutOx2r3JwXvUrxZFzVvL:/dOXmYuCaFC9YGxAqvUrbFxT
TLSH
T1C3469E94CDA62330FBA4A676162B42BA527D92FED7A8F05936A47D130060C1C47FDECD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51212

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegOpenKeyExA

ole32

CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket

oleaut32

SafeArrayCreateVector SafeArrayDestroy SafeArrayPutElement SysAllocString SysFreeString VariantInit

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest

ws2_32

htons

user32

ShowWindow

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-private-l1-1-0

__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fwrite

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeleteFileA EnterCriticalSection FlushFileBuffers FreeLibrary GetCurrentProcess GetCurrentProcessId GetEnvironmentVariableA GetFileAttributesA GetFileSize GetLastError GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress GetSystemDirectoryA GetTempPathA GetTickCount GetWindowsDirectoryA InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryExA LocalFree ReadFile SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile

ntdll

NtAllocateVirtualMemory NtFreeVirtualMemory

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-math-l1-1-0

__setusermatherr

Name

.text

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

110KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

advapi32

ole32

oleaut32

winhttp

ws2_32

user32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

ntdll

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

generic