2026-07-05_342f76d711146152247d595dcfd6dde3_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_342f76d711146152247d595dcfd6dde3_conti
Size 95KB
Sample260705-3e2jjsb16j
SHA256 eaff4300ad2fd469fae8ec4ade2db1b50f43365a3c5ddc4702bf7d8a58565740
MD5 342f76d711146152247d595dcfd6dde3
SHA1 a618a19310353b019aea4d0f5f419e2c72bca57d
SHA512 c91985a54920e37dc4cb6413958ec3e844f648c9f0aa42c0c5eae947cad48489b3469fc3019d3ac1014d3070c0b1bfd165cfa3064e6689fd2722107634d2c6c4
SSDEEP 1536:L2/w0b7pcu+YnOnaDvCydOHHNxAkwxqkP7jCMNa+mLDfSn8z6YnaUtDZlHdZF2j0:L272u+fnyvCyd64kwxqkPc+mfSni6aa6
TLSH
T1EB935C17E68320FCC96BC074A6F65733F572B86501347A3E6794C7312E61EA1BF19A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables packed with Themida 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_Themida

Detects executables referencing many IR and analysis tools 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_References_SecTools

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_342f76d711146152247d595dcfd6dde3_conti

File Explorer

2026-07-05_342f76d711146152247d595dcfd6dde3_conti

.exe 95KB

2026-07-05_342f76d711146152247d595dcfd6dde3_conti

IMPHASH d7de084f278ef97dedb4bfe85958e159
SHA256 eaff4300ad2fd469fae8ec4ade2db1b50f43365a3c5ddc4702bf7d8a58565740
MD5 342f76d711146152247d595dcfd6dde3
SHA1 a618a19310353b019aea4d0f5f419e2c72bca57d
SHA512 c91985a54920e37dc4cb6413958ec3e844f648c9f0aa42c0c5eae947cad48489b3469fc3019d3ac1014d3070c0b1bfd165cfa3064e6689fd2722107634d2c6c4
SSDEEP 1536:L2/w0b7pcu+YnOnaDvCydOHHNxAkwxqkP7jCMNa+mLDfSn8z6YnaUtDZlHdZF2j0:L272u+fnyvCyd64kwxqkPc+mfSni6aa6
TLSH
T1EB935C17E68320FCC96BC074A6F65733F572B86501347A3E6794C7312E61EA1BF19A0A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Detects executables packed with Themida
Detects executables referencing many IR and analysis tools
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges CloseServiceHandle ControlService CreateServiceA DeleteService LookupPrivilegeValueA OpenProcessToken OpenSCManagerA OpenServiceA QueryServiceStatusEx RegCloseKey RegCreateKeyExA RegDeleteValueA RegOpenKeyExA RegSetValueExA StartServiceA

kernel32

CloseHandle CopyFileA CreateDirectoryA CreateProcessA CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection ExpandEnvironmentStringsA FindClose FindFirstFileA FindNextFileA GetCPInfo GetCurrentProcess GetExitCodeProcess GetFileAttributesA GetFullPathNameA GetLastError GetLocalTime GetModuleHandleA GetProcAddress GetProcessId GetSystemDirectoryA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection Module32First Module32FirstW Module32Next Module32NextW MultiByteToWideChar OpenProcess OpenThread Process32First Process32Next ReadProcessMemory ResumeThread SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess Thread32First Thread32Next TlsGetValue VirtualProtect VirtualQuery VirtualQueryEx WaitForSingleObject WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock _stricmp _strnicmp _unlock atexit abort atoi calloc exit fclose fflush fopen fprintf fputc free fread fseek ftell fwrite getchar localeconv malloc memcpy memset putchar puts rand setvbuf signal srand strchr strcmp strerror strlen strncmp strncpy strrchr strstr vfprintf wcslen

Name

.text

Size

65KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

404KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_342f76d711146152247d595dcfd6dde3_conti

advapi32

kernel32

msvcrt

generic