2026-06-04_ff6cea0dcc2fe907474437ad4a02f898_elex_mespinoza

General

Target
2026-06-04_ff6cea0dcc2fe907474437ad4a02f898_elex_mespinoza
Size 286KB
Sample260604-tkdv1abs4p
SHA256 57a25da2a85da36e5f6918bfe741fbbbac52d48b5c6eb6df36df573c1f768cef
MD5 ff6cea0dcc2fe907474437ad4a02f898
SHA1 2f4050c068e129ea40eb3d5fa4a437924a889054
SHA512 6ffb834da4a64cabde971c7be6420fcc7cb116e95297c5fc170226463024c3d751b542542624ac0cd9a6e89d8b89bc01da27cdbb479dea71eaffc95e4b71e081
SSDEEP 3072:1LONHEpwiuQcT9ZSQMulXEJ2DxKK0jb6lrqmYWTK97lVLnxrqqmM83xKN2uINEq:1LONIwi8EJN41M6Zqh7zLnrmHo8
TLSH
T161544A13BB84C9B2D49A11318CAEB7EA967AF9711F1183E73344639E4DB13C06E35297
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-04_ff6cea0dcc2fe907474437ad4a02f898_elex_mespinoza

File Explorer

2026-06-04_ff6cea0dcc2fe907474437ad4a02f898_elex_mespinoza

.exe 286KB

2026-06-04_ff6cea0dcc2fe907474437ad4a02f898_elex_mespinoza

SHA256 57a25da2a85da36e5f6918bfe741fbbbac52d48b5c6eb6df36df573c1f768cef
MD5 ff6cea0dcc2fe907474437ad4a02f898
SHA1 2f4050c068e129ea40eb3d5fa4a437924a889054
SHA512 6ffb834da4a64cabde971c7be6420fcc7cb116e95297c5fc170226463024c3d751b542542624ac0cd9a6e89d8b89bc01da27cdbb479dea71eaffc95e4b71e081
SSDEEP 3072:1LONHEpwiuQcT9ZSQMulXEJ2DxKK0jb6lrqmYWTK97lVLnxrqqmM83xKN2uINEq:1LONIwi8EJN41M6Zqh7zLnrmHo8
TLSH
T161544A13BB84C9B2D49A11318CAEB7EA967AF9711F1183E73344639E4DB13C06E35297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

55867

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\csisyncclient.pdb

Name

.text

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

320B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-04_ff6cea0dcc2fe907474437ad4a02f898_elex_mespinoza

generic