ProxyBridge[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ProxyBridge.exe
Size 537KB
Sample261022-2mhwqsys9p
SHA256 34affc787f15c5d44d0d8f56747e1fc6d65b9f24f4a1b12674555106c3f261f9
MD5 c7a28bfe20b64b23b6453a784b1eaecd
SHA1 9c1090216e8be3c69bdf82c0382a87f180e837ab
SHA512 1773d5646c1630c9f4c1c3e631d7c181eece78bae2773f58c5e31e441129c707438e12b99444b1621bdf3e54fe28172602feeb00b4f750352ac91807e67df9d5
SSDEEP 12288:rwxtNOhf+Q889SPdmLcCybvdaT0UE9Klc:rqNef+U9SUksTTE9Klc
TLSH
T12EC4BE45B3E548F9FDB7863C88A3C512E63278165B30CADF1364965A2F232E1DD39B12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

ProxyBridge.exe

.exe 537KB

ProxyBridge.exe

IMPHASH d22d48cbcf119d707831df9e2b5e0180
SHA256 34affc787f15c5d44d0d8f56747e1fc6d65b9f24f4a1b12674555106c3f261f9
MD5 c7a28bfe20b64b23b6453a784b1eaecd
SHA1 9c1090216e8be3c69bdf82c0382a87f180e837ab
SHA512 1773d5646c1630c9f4c1c3e631d7c181eece78bae2773f58c5e31e441129c707438e12b99444b1621bdf3e54fe28172602feeb00b4f750352ac91807e67df9d5
SSDEEP 12288:rwxtNOhf+Q889SPdmLcCybvdaT0UE9Klc:rqNef+U9SUksTTE9Klc
TLSH
T12EC4BE45B3E548F9FDB7863C88A3C512E63278165B30CADF1364965A2F232E1DD39B12
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

15:80:77:0b:ed:d6:07:8c:7e:5c:77:a3:e3:5b:ee:85:b8:d8:12:95:78:65:b1:e4:68:69:38:7a:69:c2:08:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Sourav Kalal,O=Sourav Kalal,ST=Maharashtra,C=IN

Chains

Oct 22, 2026

CN=Sourav Kalal,O=Sourav Kalal,ST=Maharashtra,C=IN

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sourav Kalal,O=Sourav Kalal,ST=Maharashtra,C=IN

Serial Number

01:8a:6c:d9:10:11:b5:03:10:dd:d8:f7:40:7c:15:e8

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 13, 2025 - Aug 12, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

78832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ReleaseDC IsIconic InvalidateRect LoadImageW SetForegroundWindow UpdateWindow PtInRect BeginPaint RegisterWindowMessageW GetParent CreateMenu SetDlgItemInt SystemParametersInfoW PostQuitMessage CheckDlgButton GetCursorPos EndPaint EnableWindow DialogBoxParamW KillTimer GetWindowLongW GetWindowTextLengthW GetMessageW GetMenuItemInfoW DefWindowProcW GetKeyState PostMessageW GetWindowRect GetMenu InsertMenuItemW DestroyWindow GetDC IsWindowVisible SetWindowPos MessageBoxW MonitorFromWindow GetMenuItemCount EnumChildWindows SetWindowLongPtrW FillRect CreateWindowExW DeleteMenu ScreenToClient RegisterClassExW SendMessageW EndDialog GetSystemMetrics SetWindowTextW CreatePopupMenu GetWindowLongPtrW GetWindowTextW GetMenuBarInfo TrackPopupMenu ShowWindow OffsetRect DispatchMessageW SetTimer RedrawWindow IsDialogMessageW GetMonitorInfoW GetDlgCtrlID SetDlgItemTextW TrackMouseEvent GetDlgItemTextW SendDlgItemMessageW MoveWindow SetMenu IsDlgButtonChecked DestroyMenu SetFocus TranslateMessage ChangeWindowMessageFilterEx LoadCursorW GetClassNameW DrawMenuBar GetWindowDC GetDlgItemInt CheckMenuItem GetClientRect GetDlgItem AppendMenuW GetMenuItemRect DrawTextW SetRect

gdi32

SelectObject CreateFontW GetStockObject GetDeviceCaps GetTextMetricsW TextOutW GetTextExtentPoint32W SetTextColor SetBkMode CreatePen SetBkColor DeleteObject CreateSolidBrush CreateFontIndirectW RoundRect

comctl32

ord413 ord410 ord412 InitCommonControlsEx

shell32

ShellExecuteW ShellExecuteExW Shell_NotifyIconW

comdlg32

GetSaveFileNameW GetOpenFileNameW

winhttp

WinHttpConnect WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpOpen WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpReceiveResponse

advapi32

OpenSCManagerW RegCloseKey QueryServiceStatus CloseServiceHandle RegCreateKeyExW RegSetValueExW OpenProcessToken StartServiceW RegOpenKeyExW RegDeleteValueW OpenServiceW QueryServiceStatusEx RegQueryValueExW GetTokenInformation

ole32

CoUninitialize CoInitializeEx CoTaskMemFree CoCreateInstance

dwmapi

DwmSetWindowAttribute

uxtheme

SetWindowTheme

kernel32

IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapAlloc IsProcessorFeaturePresent GetModuleHandleExW TerminateProcess ExitProcess GetStdHandle RtlPcToFileHeader RaiseException EncodePointer RtlLookupFunctionEntry InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RtlUnwindEx UnhandledExceptionFilter GetStartupInfoW SetStdHandle InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter MoveFileW GetFileSize MoveFileExW DeleteFileW GetFileAttributesW FindClose GetEnvironmentVariableW FindNextFileW FindFirstFileW CreateDirectoryW GetExitCodeProcess LoadLibraryExW MulDiv SetProcessWorkingSetSize QueryFullProcessImageNameW WideCharToMultiByte HeapReAlloc HeapFree GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleHandleW GetStringTypeW FreeLibrary CreateProcessW GetCurrentProcessId DeleteCriticalSection SetUnhandledExceptionFilter VirtualProtect GetProcAddress GetNamedPipeServerProcessId GetLocalTime ResetEvent CreateThread CloseHandle Process32FirstW lstrcatW SetEvent Process32NextW GetLastError LCMapStringW GetProcessHeap SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW CopyFileW GetTickCount64 Sleep MultiByteToWideChar CreateEventW CreateToolhelp32Snapshot OpenProcess CreateFileW WaitForSingleObject GetTempPathW ReadFile SetNamedPipeHandleState EnterCriticalSection GetCurrentProcess lstrlenW WriteFile lstrcpynW GetModuleFileNameW LeaveCriticalSection InitializeCriticalSection

Name

.text

Size

176KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

263KB

Virtual Size

263KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ProxyBridge.exe

user32

gdi32

comctl32

shell32

comdlg32

winhttp

advapi32

ole32

dwmapi

uxtheme

kernel32

generic