the hospital[.]exe

Resubmissions

24/10/2026, 12:15

261024-pfd8ratzfz

24/10/2026, 12:15

261024-pe75fabx2m3

Sharing

Copy URL Twitter E-mail

General

Target
the hospital.exe
Size 11.0MB
Sample261024-pfd8ratzfz
SHA256 3a49c3e40930324639a2c76bc42ce47a9567810c350049e1de00739944791d1e
MD5 6fc9eab0426b0eefea5f97218aaffeb6
SHA1 3684c862d5b8017650889064c1101725635ac296
SHA512 f19a7800ce5dd5c45a7872cdfdf69db4f68641881d4600e8ba3e4bdd74188dcb684484b3e621bf84a7678a04b9e73a355841056ecfaea35add5f43f79881f082
SSDEEP 196608:KFQ0wzSjy7gZ+ZTlWZg3+xvRLgLRn01vYaGb4eepeif28t4RB7FmYwT41Y2X5FW1:KFQ0wzSjy7gZ+ZTgZgOxvRLgLRn01vYw
TLSH
T13DC6AE22F951C075E8925572B57DFB3F982CEE12072841C367E43D47BE706E26AB9382
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
the hospital.exe

File Explorer

the hospital.exe

.exe 11.0MB

the hospital.exe

IMPHASH d95d6ea9375a00177f1911909ce801e6
SHA256 3a49c3e40930324639a2c76bc42ce47a9567810c350049e1de00739944791d1e
MD5 6fc9eab0426b0eefea5f97218aaffeb6
SHA1 3684c862d5b8017650889064c1101725635ac296
SHA512 f19a7800ce5dd5c45a7872cdfdf69db4f68641881d4600e8ba3e4bdd74188dcb684484b3e621bf84a7678a04b9e73a355841056ecfaea35add5f43f79881f082
SSDEEP 196608:KFQ0wzSjy7gZ+ZTlWZg3+xvRLgLRn01vYaGb4eepeif28t4RB7FmYwT41Y2X5FW1:KFQ0wzSjy7gZ+ZTgZgOxvRLgLRn01vYw
TLSH
T13DC6AE22F951C075E8925572B57DFB3F982CEE12072841C367E43D47BE706E26AB9382
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4804611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\BuildAgent\temp\buildTmp\UnityPlayer_Symbols.pdb

hid

HidP_GetButtonCaps HidP_GetCaps HidD_GetProductString HidP_GetValueCaps HidP_MaxDataListLength HidP_GetData HidD_GetPreparsedData HidD_FreePreparsedData HidD_GetHidGuid

ws2_32

htonl inet_addr closesocket WSACleanup getsockname connect gethostbyname htons WSAStartup WSAAsyncGetHostByName WSACancelAsyncRequest gethostbyaddr getaddrinfo freeaddrinfo getpeername getsockopt send recv shutdown listen accept ntohs bind recvfrom sendto __WSAFDIsSet WSASetLastError select setsockopt inet_ntoa ioctlsocket gethostname socket WSAGetLastError

kernel32

WriteFile FindClose DeleteFileW RemoveDirectoryW FindNextFileW FindFirstFileW GetModuleFileNameW lstrcpynA lstrcpyA lstrcpynW FreeLibrary GetCommandLineW GetProcAddress LoadLibraryW CancelIo GetOverlappedResult CreateEventW ExpandEnvironmentStringsA CreateMutexA GetCurrentThreadId RaiseException GetCurrentProcess GetModuleHandleA GetSystemInfo GlobalMemoryStatusEx GetUserDefaultLangID GetVersionExA GetComputerNameW LoadLibraryA GetTempPathW GetModuleHandleW GetCurrentProcessId SetUnhandledExceptionFilter WaitForSingleObject CreateThread OutputDebugStringA SetLastError GetEnvironmentVariableA GetFileAttributesA GetModuleFileNameA GetCurrentDirectoryA ResumeThread GetThreadContext SuspendThread GetCurrentThread IsBadReadPtr GetWindowsDirectoryA GetFullPathNameW CreateSemaphoreA Sleep WaitForSingleObjectEx ReleaseSemaphore InterlockedCompareExchange SleepEx InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection SetThreadPriority CreateEventA GlobalAlloc SetEvent ResetEvent FileTimeToDosDateTime FileTimeToLocalFileTime lstrlenA GetFileTime VirtualQuery GlobalMemoryStatus GetSystemTimeAsFileTime MoveFileExW CreateDirectoryW SetErrorMode WritePrivateProfileStringW HeapAlloc HeapReAlloc HeapFree RtlUnwind EncodePointer DecodePointer ExitProcess SetConsoleCtrlHandler ExitThread DuplicateHandle GetCommandLineA HeapSetInformation GetStartupInfoW GetStdHandle HeapCreate IsProcessorFeaturePresent InterlockedIncrement InterlockedDecrement HeapSize GetLocaleInfoW UnhandledExceptionFilter TerminateProcess GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount InterlockedExchange GetConsoleCP GetConsoleMode FlushFileBuffers SetHandleCount GetFileType SetStdHandle LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CompareStringW SetEnvironmentVariableA CreateFileA WriteConsoleW GetProcessHeap GetFullPathNameA lstrcmpiA MapViewOfFile CreateFileMappingA UnmapViewOfFile VirtualFree VirtualAlloc GetProcessAffinityMask OpenEventA GetSystemDirectoryA GetDateFormatA GetTimeFormatA CreateSemaphoreW CreateMutexW SignalObjectAndWait ReleaseMutex FlushConsoleInputBuffer GetVersion GetFileAttributesW CreateProcessW SetFileAttributesW GlobalLock GlobalUnlock GetFileSize ReadFile CreateFileW SetEndOfFile SetFilePointer CloseHandle IsDebuggerPresent WideCharToMultiByte FormatMessageA LocalFree MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc InterlockedExchangeAdd FileTimeToSystemTime GetFileInformationByHandle PeekNamedPipe GetDriveTypeA FindFirstFileExA GetTimeZoneInformation ReadConsoleInputA SetConsoleMode GetCurrentDirectoryW GetDriveTypeW WaitForMultipleObjects TerminateThread SetThreadAffinityMask HeapValidate CopyFileW HeapWalk

user32

EnumWindows SendMessageA SetForegroundWindow ShowWindow IsIconic RegisterWindowMessageA GetUserObjectInformationA GetThreadDesktop GetParent SendMessageTimeoutA GetWindowLongA SetWindowPos GetClientRect CreateDialogParamA SetWindowLongA GetDlgItem ChangeDisplaySettingsA GetWindowPlacement AdjustWindowRectEx EnumDisplaySettingsA GetDesktopWindow UnregisterClassW GetRawInputDeviceList GetRawInputDeviceInfoW GetRawInputData RegisterRawInputDevices wsprintfA GetCursorPos GetWindowRect OpenClipboard EmptyClipboard CloseClipboard SetClipboardData CreateWindowExW DestroyWindow OffsetRect DefWindowProcW DestroyCursor LoadCursorA SetCursor GetSystemMetrics GetDC ReleaseDC CreateIconIndirect GetUserObjectInformationW GetProcessWindowStation wvsprintfA MonitorFromWindow GetCaretBlinkTime PeekMessageA GetMessageA DispatchMessageA ValidateRect EnumDisplayDevicesA EnumDisplayMonitors GetMonitorInfoA LoadImageA DialogBoxParamA IsDlgButtonChecked CheckDlgButton CreateDialogParamW PeekMessageW IsDialogMessageW TranslateMessage DispatchMessageW MsgWaitForMultipleObjects EnableWindow SetWindowTextW RegisterClassW PostQuitMessage SetWindowLongW GetWindowLongW SetCursorPos ClipCursor IsWindowVisible ScreenToClient GetClipboardData IsClipboardFormatAvailable SetCapture ReleaseCapture UnregisterDeviceNotification RegisterDeviceNotificationW SystemParametersInfoW ClientToScreen GetAsyncKeyState ShowCursor GetFocus SetFocus WindowFromPoint MessageBoxW RegisterClassExW DialogBoxParamW GetAncestor LoadIconA SendDlgItemMessageW SetDlgItemTextA SetDlgItemTextW MessageBoxA CopyRect GetKeyState EndDialog

version

GetFileVersionInfoW GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

ole32

CoCreateInstance CoTaskMemFree CoTaskMemAlloc StringFromGUID2 CoCreateGuid CoInitialize CoUninitialize CoSetProxyBlanket

shlwapi

PathFileExistsW SHDeleteKeyA PathCanonicalizeW PathIsDirectoryW

advapi32

CryptGetHashParam CryptImportKey CryptVerifySignatureA CryptDestroyKey RegDeleteValueA GetUserNameA RegCreateKeyExW RegQueryValueExW CryptDestroyHash CryptHashData CryptReleaseContext RegOpenKeyExW RegSetValueExW RegCreateKeyA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegisterEventSourceA ReportEventA DeregisterEventSource CryptCreateHash CryptAcquireContextA

gdi32

SwapBuffers GetObjectA GetDeviceCaps ChoosePixelFormat SetPixelFormat DeleteObject CreateBitmap CreateDIBSection

shell32

ShellExecuteW CommandLineToArgvW SHGetFolderPathW

opengl32

glIsTexture glGetTexParameteriv glTexSubImage2D glPixelStorei glCopyTexSubImage2D glDrawBuffer glReadBuffer glDrawArrays wglDeleteContext glBegin glVertex3f glNormal3f glColor4f glEnd glHint glLightModelf glLoadIdentity glMaterialfv glMaterialf glReadPixels glFinish glFogi glFogf glFogfv glLightModelfv glLightf glLightfv glTexGeni glTexGenfv glTexEnvfv glScissor glViewport glColor4fv glLightModeli glColorMaterial glGetFloatv glMultMatrixf glMatrixMode glPolygonMode glFrontFace glClearColor glClearDepth glClearStencil glClear glIsEnabled glStencilFunc glStencilOp glStencilMask glDepthFunc glDepthMask glCullFace glPolygonOffset glColorMask glDisable glBlendFunc glEnable glAlphaFunc glTexEnvi glTexEnvf glDisableClientState glEnableClientState glColorPointer glVertexPointer glNormalPointer glTexCoordPointer glDrawElements glGetString glGetError glDeleteTextures glGenTextures glBindTexture glTexParameteri glTexImage2D wglGetProcAddress glGetIntegerv wglShareLists wglGetCurrentDC wglGetCurrentContext wglMakeCurrent wglCreateContext glLoadMatrixf

winmm

waveInOpen waveInStart waveInGetDevCapsW waveInGetDevCapsA waveInUnprepareHeader waveInPrepareHeader waveInAddBuffer waveOutGetPosition waveOutReset waveOutWrite waveInClose waveOutOpen waveOutClose waveOutGetDevCapsW waveOutGetDevCapsA waveOutGetNumDevs waveInGetNumDevs timeBeginPeriod timeEndPeriod timeGetTime waveInReset waveOutUnprepareHeader waveOutPrepareHeader

oleaut32

SysStringLen SysAllocString VariantChangeType VariantClear VariantInit SysFreeString

msacm32

acmStreamConvert acmStreamUnprepareHeader acmFormatSuggest acmStreamOpen acmStreamSize acmStreamPrepareHeader

imm32

ImmReleaseContext ImmSetOpenStatus ImmGetConversionStatus ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmGetContext ImmSetCompositionStringW

dnsapi

DnsQuery_A DnsFree

iphlpapi

GetIpAddrTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser

??$Transfer@V?$StreamedBinaryRead@$00@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Object@@IAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$00@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$00@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Object@@IAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryRead@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Object@@IAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z ??$Transfer@VProxyTransfer@@@AnimationEvent@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Behaviour@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Component@Unity@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@GameObject@Unity@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@GlobalGameManager@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@LevelGameManager@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@NamedObject@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Object@@IAEXAAVProxyTransfer@@@Z ??$Transfer@VProxyTransfer@@@Renderer@@QAEXAAVProxyTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@AnimationEvent@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Behaviour@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Component@Unity@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@GameObject@Unity@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@GlobalGameManager@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@LevelGameManager@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@NamedObject@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Object@@IAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VRemapPPtrTransfer@@@Renderer@@QAEXAAVRemapPPtrTransfer@@@Z ??$Transfer@VSafeBinaryRead@@@AnimationEvent@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Behaviour@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Component@Unity@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@GameObject@Unity@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@GlobalGameManager@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@LevelGameManager@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@NamedObject@@QAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Object@@IAEXAAVSafeBinaryRead@@@Z ??$Transfer@VSafeBinaryRead@@@Renderer@@QAEXAAVSafeBinaryRead@@@Z AgPmDestroySourceConnection AgPmEventEnabled AgPmEventLoggingEnabled AgPmSubmitEvent NvOptimusEnablement NxCreateCoreSDK

Name

.text

Size

8.3MB

Virtual Size

8.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

184KB

Virtual Size

816KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.trace

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

553KB

Virtual Size

552KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

369KB

Virtual Size

368KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=149, productName=VS2008 build 21022, version=21022,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=402, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=23, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=29, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=38, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=543, id=1, productName=Unmarked objects,

count=8, id=152, version=20115,

count=68, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=177, productName=Unmarked objects (old),

count=876, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=1152, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,