2026-07-11_c47400e0ac1cb73f746821764a34a41c_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_c47400e0ac1cb73f746821764a34a41c_conti
Size 184KB
Sample260711-sqrtdaft2z
SHA256 25ce028e94e6d2b95f162c21c8e23fcf0cc435c5135d0adb844da9a2f739cde3
MD5 c47400e0ac1cb73f746821764a34a41c
SHA1 db39d479d74a72921fcce3a851f01a3bf7d2598b
SHA512 1c886ba855cfb856341262a824c850fb1c08536cdea0fef8834de3dae16fc4e8d741bbb62a74d7e0d1c80c2ae2e158cd8b3fab8301a1c100156b01125938af85
SSDEEP 3072:NkoAMvh+VjpBsFkwx2t27ZmJnhCI/83+KU296TRn:mw8Xy6/83+r296Tl
TLSH
T12304171AE39324FCC696C175C6965BB1E632F86503206FBF0354D6751E31EC1AE3EA22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_c47400e0ac1cb73f746821764a34a41c_conti

File Explorer

2026-07-11_c47400e0ac1cb73f746821764a34a41c_conti

.exe 184KB

2026-07-11_c47400e0ac1cb73f746821764a34a41c_conti

IMPHASH e17f236a9efc915163769b94bd0346e4
SHA256 25ce028e94e6d2b95f162c21c8e23fcf0cc435c5135d0adb844da9a2f739cde3
MD5 c47400e0ac1cb73f746821764a34a41c
SHA1 db39d479d74a72921fcce3a851f01a3bf7d2598b
SHA512 1c886ba855cfb856341262a824c850fb1c08536cdea0fef8834de3dae16fc4e8d741bbb62a74d7e0d1c80c2ae2e158cd8b3fab8301a1c100156b01125938af85
SSDEEP 3072:NkoAMvh+VjpBsFkwx2t27ZmJnhCI/83+KU296TRn:mw8Xy6/83+r296Tl
TLSH
T12304171AE39324FCC696C175C6965BB1E632F86503206FBF0354D6751E31EC1AE3EA22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libp11-kit-0

p11_kit_be_loud p11_kit_module_load p11_kit_module_release p11_kit_remote_serve_module p11_kit_remote_serve_tokens

libintl-8

__printf__ libintl_dgettext libintl_textdomain

kernel32

CloseHandle CreateFileA CreateFileMappingA CreateThread DeleteCriticalSection EnterCriticalSection FormatMessageA FreeLibrary GetCPInfo GetCurrentProcess GetFileSizeEx GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MapViewOfFile MultiByteToWideChar SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __argv __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _assert _cexit _commode _errno _fileno _fileno _fmode _getpid _gmtime64 _initterm _lock _mkdir _open _putenv_s _setmode _stat64 _stricmp _strdup _unlock _vscprintf _vsnprintf _write abort atexit calloc exit fflush fprintf fputc free fwrite getenv isalpha isleadbyte localeconv malloc memcpy rand realloc setvbuf signal strchr strcmp strerror strlen strncmp strncpy strpbrk strrchr vfprintf wcslen

Name

.text

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

188B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd003

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_c47400e0ac1cb73f746821764a34a41c_conti

libp11-kit-0

libintl-8

kernel32

msvcrt

generic