conti[.]exe | Triage™

General

Target
conti.exe
Size 178KB
Sample230328-m4kz4aae87
SHA256 139a8bb2c5537190e747d2f651b423147018fd9a9a21bb36281d4ce1c61727c1
MD5 8d27d0c897ce21f1036bf659fc663cf2
SHA1 afe3d0fb48092aeca4dcd3989a076e87fdbe69b2
SHA512 531873e8faaf801a447f70848969865750f41fd5ff15bd8c47015e766a9bb8cc1fbb8dcae16ddbf1e4f9dbc5750af593ef8fdcf94cd1a61efa00c7790cda4374
SSDEEP 3072:/gq2DKdMbv1S/n6rHBJK3V9LBSLrKa+HQXvMES/D3Yw7yZyYpEaI:/84X/19LUPMcMEw3kTI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

conti.exe

.exe 178KB

conti.exe

IMPHASH f5346a7d2508fd5976d3449f3afc971d
SHA256 139a8bb2c5537190e747d2f651b423147018fd9a9a21bb36281d4ce1c61727c1
MD5 8d27d0c897ce21f1036bf659fc663cf2
SHA1 afe3d0fb48092aeca4dcd3989a076e87fdbe69b2
SHA512 531873e8faaf801a447f70848969865750f41fd5ff15bd8c47015e766a9bb8cc1fbb8dcae16ddbf1e4f9dbc5750af593ef8fdcf94cd1a61efa00c7790cda4374
SSDEEP 3072:/gq2DKdMbv1S/n6rHBJK3V9LBSLrKa+HQXvMES/D3Yw7yZyYpEaI:/84X/19LUPMcMEw3kTI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

96842

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

wsprintfW

ws2_32

WSAGetLastError htons inet_ntoa

kernel32

WideCharToMultiByte DecodePointer EncodePointer WriteConsoleW SetFilePointerEx GetConsoleMode LoadLibraryA GetProcAddress CloseHandle GetLocalTime CreateToolhelp32Snapshot Process32NextW Process32FirstW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar CreateFileW ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP

Sharing