2026-04-15_3fe6769b888c70d33f3df2fc30e704af_elex_mespinoza

General

Target
2026-04-15_3fe6769b888c70d33f3df2fc30e704af_elex_mespinoza
Size 1.5MB
Sample260415-rwsgescs2v
SHA256 a95d9ce70d24124322409e89dfa67c9821362af96579f6009f598278c53f1710
MD5 3fe6769b888c70d33f3df2fc30e704af
SHA1 165a9b83cdede1b387befc0fbe0550cbfde89065
SHA512 d22dbb8bba819ff9bb540d07b696fd97e854892a71b4dc08765a9efa0028cc6d8dce98a6ef7130ca16dc1033c2ef89e0abde7947b6db46bf3134ff290ef356e9
SSDEEP 24576:0+2Jm/jlSmf6KeGUcgQW/MUSdGDd4K3ukDf2ROf1IegqutJQ5FeQzcuC4r6HQaTU:ImUi6AjW/MUSdGRf3/z2RAR5FeA6wa
TLSH
T1D8756B11A6A48075E1B356348E75F23E9674BD50C933CE4B6280DECEFFF26819A16732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_3fe6769b888c70d33f3df2fc30e704af_elex_mespinoza

File Explorer

2026-04-15_3fe6769b888c70d33f3df2fc30e704af_elex_mespinoza

.exe 1.5MB

2026-04-15_3fe6769b888c70d33f3df2fc30e704af_elex_mespinoza

SHA256 a95d9ce70d24124322409e89dfa67c9821362af96579f6009f598278c53f1710
MD5 3fe6769b888c70d33f3df2fc30e704af
SHA1 165a9b83cdede1b387befc0fbe0550cbfde89065
SHA512 d22dbb8bba819ff9bb540d07b696fd97e854892a71b4dc08765a9efa0028cc6d8dce98a6ef7130ca16dc1033c2ef89e0abde7947b6db46bf3134ff290ef356e9
SSDEEP 24576:0+2Jm/jlSmf6KeGUcgQW/MUSdGDd4K3ukDf2ROf1IegqutJQ5FeQzcuC4r6HQaTU:ImUi6AjW/MUSdGRf3/z2RAR5FeA6wa
TLSH
T1D8756B11A6A48075E1B356348E75F23E9674BD50C933CE4B6280DECEFFF26819A16732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

312099

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\protocolhandler.pdb

Name

.text

Size

317KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

90KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

360B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

164KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_3fe6769b888c70d33f3df2fc30e704af_elex_mespinoza

generic