7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a

Sharing

Copy URL Twitter E-mail

General

Target
7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a
Size 289KB
Sample261027-x8zn6aed37
SHA256 7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a
MD5 cf4719a67bcaf0fd7fdf75604314f3fd
SHA1 e3f43e2a8c7fe5b0348ca0d459477192cacf7e95
SHA512 02e92a91a24fccf7d9752c15039374f99f5c806ec05f953c8ec358d4eb51e4f8f6b431a06d50579cdcf10ae9c50714b7003005b7c82d99f25205c4a33e0a558a
SSDEEP 6144:55ixjkrUSPxJjJeBR8/BiB0my9guSZnsoN31H8mvLTGFRp:2xjHSPxreBRpyxSNsoNR8mvOFRp
TLSH
T1FC547C00F79A8036ED2B2D751D72932D853D79119B388BC7DBC12E2EDE212D2997A31D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a

File Explorer

7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a

.exe 289KB

7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a

IMPHASH 0081ba9960d0b129995eaa83cddb565d
SHA256 7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a
MD5 cf4719a67bcaf0fd7fdf75604314f3fd
SHA1 e3f43e2a8c7fe5b0348ca0d459477192cacf7e95
SHA512 02e92a91a24fccf7d9752c15039374f99f5c806ec05f953c8ec358d4eb51e4f8f6b431a06d50579cdcf10ae9c50714b7003005b7c82d99f25205c4a33e0a558a
SSDEEP 6144:55ixjkrUSPxJjJeBR8/BiB0my9guSZnsoN31H8mvLTGFRp:2xjHSPxreBRpyxSNsoNR8mvOFRp
TLSH
T1FC547C00F79A8036ED2B2D751D72932D853D79119B388BC7DBC12E2EDE212D2997A31D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4c:da:64:04:76:51:7b:90:96:21:b1:d8:48:f6:1f:76:7f:d1:ba:1b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO

Chains

Oct 26, 2026

CN=7HS-GO

Minor OS version

Major OS version

Entry point

140816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

RO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

uxtheme

SetWindowTheme

kernel32

ExpandEnvironmentStringsW GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetLocalTime FindFirstFileW OutputDebugStringW FindClose FindNextFileW WaitForSingleObject GetLastError RemoveDirectoryW CloseHandle DeleteFileW SetFileAttributesW WriteFile WideCharToMultiByte ReadFile CreateFileW MultiByteToWideChar GetFileSizeEx LoadLibraryW GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID LocalFree GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetLocaleInfoW GetStdHandle ExitProcess HeapSize HeapCreate IsProcessorFeaturePresent GetProcAddress GetCurrentThreadId SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess LCMapStringW HeapAlloc HeapSetInformation RtlUnwind GetCurrentDirectoryW GetModuleFileNameW GetFileAttributesW FormatMessageW SetStdHandle WriteConsoleW GetStartupInfoW GetCPInfo GetSystemTimeAsFileTime FlushFileBuffers InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW RaiseException

user32

DestroyIcon EndPaint ClientToScreen DestroyWindow SetCursor GetWindowTextLengthW GetWindowRect PostQuitMessage TrackPopupMenu FillRect PostMessageW DrawTextW SetForegroundWindow TrackMouseEvent LoadCursorW GetClientRect BeginPaint PtInRect wsprintfW GetDC RegisterClassExW InvalidateRect GetWindowLongW AppendMenuW GetWindowTextW GetClassNameW ReleaseDC SetWindowLongW GetCursorPos ShowWindow CreatePopupMenu CreateWindowExW GetSystemMetrics SendMessageW MapWindowPoints UpdateWindow EnableWindow AdjustWindowRect DestroyMenu GetDlgCtrlID SetWindowTextW CallWindowProcW DefWindowProcW GetMessageW TranslateMessage MessageBoxW DispatchMessageW LoadIconW

gdi32

SetBkMode SetBkColor DeleteObject SelectObject CreateFontW EnumFontFamiliesExW GetStockObject CreateSolidBrush SetTextColor

Sharing

General

Malware Config

Signatures

File Explorer

7a492156effb3177eebf6f70c47077f62d43866195af67e96a1e6b411022602a

PE Signature issue

shell32

comctl32

uxtheme

kernel32

user32

gdi32

generic