2026-04-15_40df161a5032bc95bb0c1b8be4d0a315_elex_mespinoza

General

Target
2026-04-15_40df161a5032bc95bb0c1b8be4d0a315_elex_mespinoza
Size 1.2MB
Sample260415-sbmacacz3w
SHA256 f03c84580a3668afd63e53ff00ee8f80b4cd00bcc87a3f32b4234c8ae9473f92
MD5 40df161a5032bc95bb0c1b8be4d0a315
SHA1 b22942a60cdf139f03b0a7e8599476439020d7cf
SHA512 03d266b1b557249329632dee607ea9225ed1c0b32889583845f348260ced34e52b75104691b9fb0bf69af3d22c4bd87a1a3f55242d15538242ad87d196c3a7b4
SSDEEP 24576:ZEoym1uBv32sNBM/9/fwK/FTwfCBM0VZeg1Pc+lPY:HUv32sNBk9/fw2BwfmM0fb
TLSH
T107556B23B6506032D72146304E65B62E726CBA31DA177E47A3AC6ECDFBF05D1AA14733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_40df161a5032bc95bb0c1b8be4d0a315_elex_mespinoza

File Explorer

2026-04-15_40df161a5032bc95bb0c1b8be4d0a315_elex_mespinoza

.exe 1.2MB

2026-04-15_40df161a5032bc95bb0c1b8be4d0a315_elex_mespinoza

SHA256 f03c84580a3668afd63e53ff00ee8f80b4cd00bcc87a3f32b4234c8ae9473f92
MD5 40df161a5032bc95bb0c1b8be4d0a315
SHA1 b22942a60cdf139f03b0a7e8599476439020d7cf
SHA512 03d266b1b557249329632dee607ea9225ed1c0b32889583845f348260ced34e52b75104691b9fb0bf69af3d22c4bd87a1a3f55242d15538242ad87d196c3a7b4
SSDEEP 24576:ZEoym1uBv32sNBM/9/fwK/FTwfCBM0VZeg1Pc+lPY:HUv32sNBk9/fw2BwfmM0fb
TLSH
T107556B23B6506032D72146304E65B62E726CBA31DA177E47A3AC6ECDFBF05D1AA14733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

154177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\vpreview.pdb

Name

.text

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_40df161a5032bc95bb0c1b8be4d0a315_elex_mespinoza

generic