new[.]exe | Triage™

Resubmissions

24/10/2026, 17:13

261024-vrvyjacy8r9

24/10/2026, 17:08

261024-vn1plsfd379

Sharing

Copy URL Twitter E-mail

General

Target
new.exe
Size 127.1MB
Sample261024-vn1plsfd37
SHA256 a7aa1338f3f01f4736a2780234f3c0629448e9afa80b9d86090be40ba0c5f83a
MD5 6920eb79b08591493b7b7b18eedabb70
SHA1 9a11a74254830c6e65957c50b80d8c9d19bf469a
SHA512 ad722a4175a1bd17c4a59e50053a4dc18716c5c81835e2230644b29c41766361c77ac0984d32da45e39b04b7ef0ae427f617e9adc668cbfde49f32144c8172af
SSDEEP 3145728:49m4MZo4+nMbOqMBYoY1bxETb/xOucshSu/K1kVSChbwH:4HMigOTeoY1NCJO8hg6VSCZwH
TLSH
T1E1583386B7E026B3CD3996B882CF43017BB58EA52354D7C703827756AD7D6E1EC1A720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
new.exe

File Explorer

new.exe

.exe 127.1MB

new.exe

IMPHASH 7f21da333c9f8753c0666293e835577f
SHA256 a7aa1338f3f01f4736a2780234f3c0629448e9afa80b9d86090be40ba0c5f83a
MD5 6920eb79b08591493b7b7b18eedabb70
SHA1 9a11a74254830c6e65957c50b80d8c9d19bf469a
SHA512 ad722a4175a1bd17c4a59e50053a4dc18716c5c81835e2230644b29c41766361c77ac0984d32da45e39b04b7ef0ae427f617e9adc668cbfde49f32144c8172af
SSDEEP 3145728:49m4MZo4+nMbOqMBYoY1bxETb/xOucshSu/K1kVSChbwH:4HMigOTeoY1NCJO8hg6VSCZwH
TLSH
T1E1583386B7E026B3CD3996B882CF43017BB58EA52354D7C703827756AD7D6E1EC1A720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

htons inet_ntoa sendto setsockopt WSACleanup closesocket inet_pton WSAStartup inet_addr socket

iphlpapi

GetAdaptersInfo

advapi32

RegOpenKeyExW OpenProcessToken RegSetValueExW RegCloseKey RegSetKeyValueW AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownExW

user32

EndPaint BeginPaint ShowCursor SetForegroundWindow UpdateWindow DrawTextW GetClientRect GetClassNameW LoadCursorW FindWindowW TranslateMessage BringWindowToTop DefWindowProcW SendMessageTimeoutW SetWindowPos MessageBoxW EnumChildWindows FillRect CreateWindowExW GetSystemMetrics SetWindowTextW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW EnumWindows

gdi32

CreateSolidBrush DeleteObject SetBkMode SetTextColor GetStockObject CreateFontW SelectObject

ole32

CoTaskMemFree CoCreateInstance PropVariantClear CoInitialize CoInitializeEx

winmm

waveOutGetNumDevs mciSendStringW waveOutSetVolume

mfplat

MFCreateAttributes MFStartup MFCreateMediaType

mfreadwrite

MFCreateSourceReaderFromURL

kernel32

GetConsoleMode FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetConsoleOutputCP SetStdHandle GetFileType LCMapStringW CompareStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetCommandLineW GetCommandLineA GetStdHandle GetProcAddress TerminateProcess ExitProcess IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread FreeLibrary GetStringTypeW HeapSize HeapReAlloc WriteConsoleW Process32FirstW ExitThread CreateThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException SizeofResource GetVolumeInformationW FindFirstFileW WriteProcessMemory FindFirstVolumeW FindNextFileW GetCurrentProcess WriteFile DeviceIoControl GetModuleFileNameW SetErrorMode GetEnvironmentVariableW GetTempPathW CreateMutexW FindClose WaitForSingleObject CreateFileW GetFileAttributesW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot Sleep SetVolumeLabelW GetLastError Process32NextW LockResource CloseHandle LoadResource FindResourceW VirtualProtectEx SetFilePointerEx MoveFileExW ReadProcessMemory FindVolumeClose CreateProcessW GetModuleHandleW FindNextVolumeW GetTickCount GetDriveTypeW VirtualQueryEx FlushFileBuffers QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId WaitForSingleObjectEx GetExitCodeThread WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx

Name

.text

Size

163KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

126.8MB

Virtual Size

126.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

new.exe

ws2_32

iphlpapi

advapi32

user32

gdi32

ole32

winmm

mfplat

mfreadwrite

kernel32

generic