2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti
Size 310KB
Sample260705-bp88labx5j
SHA256 de4eb68862cf5900d399aadef973f5968aaae1320d4e62b8abdda0b2a5aaf98a
MD5 9a403b4dbb2b00719c5b7131b6397c05
SHA1 1849a2c7ee905e938d9e745d0ea04c9b0d9252bc
SHA512 d5e5ef512ad8c8f8656f2670e0f81c01f846ff47a923f676eb6cf6c6fdf2dee98d5dca7b2c53397051618fa297833e3113ee84ca1d6ff187942925312214f728
SSDEEP 3072:3JwiYhIGLwixL55om7daB206N4hrfUmP9FaQEznSyTrq2HFYnyqTAJJgH/v7Kzku:WiYp9QB64lTPPaBWnd4JgH37/pfvBQuG
TLSH
T13C646D82FBC55CEACA2641398DABC3797338F6D127835B174D2872341E23AD1FD95682
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti

File Explorer

2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti

.exe 310KB

2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti

IMPHASH 3549ba53fdce0d6b0972e8307bde720f
SHA256 de4eb68862cf5900d399aadef973f5968aaae1320d4e62b8abdda0b2a5aaf98a
MD5 9a403b4dbb2b00719c5b7131b6397c05
SHA1 1849a2c7ee905e938d9e745d0ea04c9b0d9252bc
SHA512 d5e5ef512ad8c8f8656f2670e0f81c01f846ff47a923f676eb6cf6c6fdf2dee98d5dca7b2c53397051618fa297833e3113ee84ca1d6ff187942925312214f728
SSDEEP 3072:3JwiYhIGLwixL55om7daB206N4hrfUmP9FaQEznSyTrq2HFYnyqTAJJgH/v7Kzku:WiYp9QB64lTPPaBWnd4JgH37/pfvBQuG
TLSH
T13C646D82FBC55CEACA2641398DABC3797338F6D127835B174D2872341E23AD1FD95682
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegCreateKeyExA RegSetValueExA

gdi32

EnumFontFamiliesExW

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileA CreateFileMappingA CreateProcessA CreateThread CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetDiskFreeSpaceExA GetFileSize GetLastError GetModuleFileNameA GetModuleHandleA GetModuleHandleExA GetProcAddress GetProcessHeap GetThreadContext GetTickCount HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryA MapViewOfFile MultiByteToWideChar OutputDebugStringA Process32First Process32Next ReadFile RemoveVectoredExceptionHandler SetFilePointer SetThreadContext SetThreadExecutionState SetUnhandledExceptionFilter Sleep TlsGetValue UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

_XcptFilter ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _exit _fmode _initterm _lock _snprintf _stricmp _time64 _unlock _vsnprintf abort atexit atoi calloc exit fflush fprintf fputc free localeconv malloc memcpy memset rand setvbuf srand strerror strlen strncmp strncpy vfprintf wcslen

ntdll

NtCreateSection NtMapViewOfSection NtUnmapViewOfSection

user32

GetDC GetSystemMetrics ReleaseDC

ws2_32

WSACleanup WSAStartup closesocket connect freeaddrinfo getaddrinfo htons inet_addr inet_ntop inet_pton recv send setsockopt socket

Name

.text

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

898B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti

advapi32

gdi32

kernel32

msvcrt

ntdll

user32

ws2_32

generic