2023-08-07_18c5aa3538f2b7c268b0b947efeb2776_conti[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-07_18c5aa3538f2b7c268b0b947efeb2776_conti.exe
Size

203KB
MD5

18c5aa3538f2b7c268b0b947efeb2776
SHA1

645158945c3717ef6b1f2a2d276c9a38988f6d32
SHA256

a2581ec030e1fb08e26ddc61b11445286aaf7271932146e7e1442a49fff734de
SHA512

8a192c62f3af2a7f8870db5d497e68faee1f93275c87609809ed5ba4751f902a7b909fc313ba719dc6f800e7d965970776cdde336027e71287822b8c2e3de9f0
SSDEEP

3072:0LJGBP1t82ETTwPAobQ3tOqmb14Gul22QZkN7S44EXZy0Rx6kh5n:qJEPCTwPp03YqyNulak4u6U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-07_18c5aa3538f2b7c268b0b947efeb2776_conti.exe

Files

2023-08-07_18c5aa3538f2b7c268b0b947efeb2776_conti.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

new_imp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

new_imp
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE