m4a[.]exe | Triage™

Resubmissions

23/10/2026, 11:16

261023-ndlpda1z2j3

23/10/2026, 11:15

261023-nczvls1y9j3

Sharing

Copy URL Twitter E-mail

General

Target
m4a.exe
Size 107KB
Sample261023-ndlpda1z2j
SHA256 01ec539e8ec61e5e2f4a5e7629a5107619808fa88e7f1dcfde26f405aec19a76
MD5 520e2bf2d4cbee33265e7604c0fafa13
SHA1 8dc30b07fcd2c58d3f3832274f36dcdca1be99af
SHA512 d9695671b2fe8b1685c14b166ae29f88f83c7bb41c9769eccc68c9df7f85f176eff481dbf3ecaabb4cf1f6685738534d359e187d34bec577cbebbbac2852e0b1
SSDEEP 1536:Z5haozabhXzV6GgISSiWeeViaJrfW7NWGZsOi5yf37n7/:3ib5RhgPoVzJAhsNUfr7
TLSH
T170B36C39DDF7BC56D35909F449EBE23C50AC5B515C228A06DAA08B85FE31F9DB840B2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
m4a.exe

File Explorer

m4a.exe

.exe 107KB

m4a.exe

IMPHASH 7f8ffb0290630cc1589039a3e0b607c6
SHA256 01ec539e8ec61e5e2f4a5e7629a5107619808fa88e7f1dcfde26f405aec19a76
MD5 520e2bf2d4cbee33265e7604c0fafa13
SHA1 8dc30b07fcd2c58d3f3832274f36dcdca1be99af
SHA512 d9695671b2fe8b1685c14b166ae29f88f83c7bb41c9769eccc68c9df7f85f176eff481dbf3ecaabb4cf1f6685738534d359e187d34bec577cbebbbac2852e0b1
SSDEEP 1536:Z5haozabhXzV6GgISSiWeeViaJrfW7NWGZsOi5yf37n7/:3ib5RhgPoVzJAhsNUfr7
TLSH
T170B36C39DDF7BC56D35909F449EBE23C50AC5B515C228A06DAA08B85FE31F9DB840B2C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

Infected

Minor OS version

Major OS version

Entry point

5312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExW RegSetValueExW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontA CreateSolidBrush DeleteDC DeleteObject Ellipse SelectObject SetBkColor SetTextColor StretchBlt TextOutA

kernel32

CloseHandle CreateFileW CreateThread DeleteCriticalSection EnterCriticalSection ExitProcess GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount GetVersionExW InitializeCriticalSection LeaveCriticalSection LoadLibraryA QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TerminateThread TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WriteFile

msimg32

AlphaBlend

msvcrt

__dllonexit __getmainargs __initenv __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _errno _fmode _initterm _iob _lock _onexit _unlock abort calloc exit fprintf free fwrite malloc memcpy memset rand signal strlen strncmp tan vfprintf

user32

GetDC GetSystemMetrics InvalidateRect MessageBoxW ReleaseDC

winmm

waveOutClose waveOutOpen waveOutPrepareHeader waveOutUnprepareHeader waveOutWrite

Name

.text

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

m4a.exe

advapi32

gdi32

kernel32

msimg32

msvcrt

user32

winmm

generic