AWARE-1[.]0[.]9-saved-refresh-2026-10-23[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AWARE-1.0.9-saved-refresh-2026-10-23.exe
Size 13.3MB
Sample261024-s9lrgafc28
SHA256 d606c48881da6b153793bc29d5ecfc7dc2321bedcaca9d61d345879613a9a0e7
MD5 4d50848a91e1b24a19a1d0e8730017b4
SHA1 50aab6ebc73b9fe93341ad76e9a8140241bf5a5b
SHA512 5a92e8b0c01a390bd33d88f1df05cb1d7f6ab1f0e24ebb0c022b98fdab252dd6291c59e996ca107f5528a9a9e426b28f8c7b3c1ddabf383c8421c8b79e280c9a
SSDEEP 49152:MzHL9Ay7EZhWCNXl1XZOV4WhTzDhaCfPYJVmkzmZWqR1K5kouDyiUettBO/+5Ahc:AWLaxem
TLSH
T160E6B9C1D88AA2CB701BEEDDC5391617BD800A5B642FF8AC473BCD611DB070769562AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AWARE-1.0.9-saved-refresh-2026-10-23.exe

File Explorer

AWARE-1.0.9-saved-refresh-2026-10-23.exe

.exe 13.3MB

AWARE-1.0.9-saved-refresh-2026-10-23.exe

IMPHASH 6a73a356aa15b3f83efda9e35659ff0f
SHA256 d606c48881da6b153793bc29d5ecfc7dc2321bedcaca9d61d345879613a9a0e7
MD5 4d50848a91e1b24a19a1d0e8730017b4
SHA1 50aab6ebc73b9fe93341ad76e9a8140241bf5a5b
SHA512 5a92e8b0c01a390bd33d88f1df05cb1d7f6ab1f0e24ebb0c022b98fdab252dd6291c59e996ca107f5528a9a9e426b28f8c7b3c1ddabf383c8421c8b79e280c9a
SSDEEP 49152:MzHL9Ay7EZhWCNXl1XZOV4WhTzDhaCfPYJVmkzmZWqR1K5kouDyiUettBO/+5Ahc:AWLaxem
TLSH
T160E6B9C1D88AA2CB701BEEDDC5391617BD800A5B642FF8AC473BCD611DB070769562AF
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13555328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

aware-external.pdb

bcrypt

BCryptFinishHash BCryptHashData BCryptImportKeyPair BCryptOpenAlgorithmProvider BCryptVerifySignature BCryptCloseAlgorithmProvider BCryptDestroyKey BCryptGetProperty BCryptCreateHash BCryptDestroyHash

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

dcomp

DCompositionCreateDevice

d3dcompiler_47

D3DCompile

user32

MessageBoxW LoadCursorW RegisterClassW GetClientRect IsWindowUnicode TrackMouseEvent SetCapture GetMessageExtraInfo ScreenToClient GetCursorPos GetKeyState SetCursorPos GetKeyboardLayout SetClipboardData EmptyClipboard MsgWaitForMultipleObjectsEx CloseClipboard GetClipboardData OpenClipboard GetKeyNameTextA MapVirtualKeyA GetWindow WindowFromPoint GetWindowThreadProcessId FindWindowW EnableWindow ReleaseCapture GetCapture SetLayeredWindowAttributes SetWindowLongPtrW RegisterHotKey PostMessageW PostQuitMessage DefWindowProcW SetCursor GetRawInputData DestroyWindow SendInput SetForegroundWindow SetWindowPos GetWindowRect ClientToScreen IsWindowVisible UnregisterHotKey IsIconic IsWindow PeekMessageW EnumDisplaySettingsW GetMonitorInfoW MonitorFromWindow EnumWindows DispatchMessageW TranslateMessage GetMessageW SetTimer GetForegroundWindow GetLayeredWindowAttributes IsWindowEnabled GetWindowLongPtrW SendMessageW ShowWindow RegisterRawInputDevices CreateWindowExW SetProcessDPIAware

gdi32

GetStockObject

imm32

ImmSetCompositionWindow ImmReleaseContext ImmSetCandidateWindow ImmGetContext

kernel32

GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetCPInfo GetEnvironmentStringsW FindClose FlushFileBuffers ReadConsoleW SetStdHandle GetConsoleMode GetConsoleOutputCP GetFileType LCMapStringW CompareStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetCommandLineW GetCommandLineA FreeEnvironmentStringsW GetStdHandle ExitProcess GetModuleHandleExW FreeLibraryAndExitThread FreeLibrary ExitThread CreateThread IsProcessorFeaturePresent DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable GetProcAddress GetLocaleInfoA SetEnvironmentVariableW GetProcessHeap GetStringTypeW HeapSize HeapReAlloc WriteConsoleW SetEndOfFile WriteFile CreateWaitableTimerExW QueryPerformanceCounter QueryPerformanceFrequency GlobalFree GlobalAlloc GetCurrentProcess QueryUnbiasedInterruptTime WaitForSingleObject GetTickCount64 Sleep FindResourceW LoadResource LockResource SizeofResource CreateMutexW GetLastError GetModuleFileNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetModuleHandleW CreateEventW SetConsoleCtrlHandler CreateWaitableTimerW GetWindowsDirectoryW WideCharToMultiByte GetFileAttributesW CloseHandle OpenProcess Module32FirstW Module32NextW SetWaitableTimer SetLastError SetEvent AcquireSRWLockExclusive ReleaseSRWLockExclusive ReadProcessMemory GetPrivateProfileIntW GetPrivateProfileStringW AcquireSRWLockShared ReleaseSRWLockShared CreateProcessW WritePrivateProfileStringW CreateFileW GetFileSizeEx ReadFile TerminateProcess SetFilePointerEx SetThreadPriority MultiByteToWideChar GlobalLock GlobalUnlock

Name

.text

Size

13.1MB

Virtual Size

13.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

AWARE-1.0.9-saved-refresh-2026-10-23.exe

bcrypt

d3d11

dxgi

dcomp

d3dcompiler_47

user32

gdi32

imm32

kernel32

generic