2026-07-28_f7a74c3b130a7c87c24b6eb5e3655c2e_elex_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_f7a74c3b130a7c87c24b6eb5e3655c2e_elex_mespinoza
Size 13.9MB
Sample260728-yexs5swtcs
SHA256 b52c187acb5b4c3b9e1f42c4710749996afc66299d103dbf638827b85a2e5d29
MD5 f7a74c3b130a7c87c24b6eb5e3655c2e
SHA1 2b994bff76f8d0ece2d90d7ab67a77ad8144bbef
SHA512 a7def11178f000087181ae3cd2111b2903196e0433434425ffe04bc8bac0ef3c1825d10013f2df284f347650c2c41581b186ec469d06db3de6db42ff8392c159
SSDEEP 393216:6dq77N/PFfcf+pHAr2ZyfJniNXzxA7eBfzqNt:6MXZZY9ixzqyfzqNt
TLSH
T1C0E63377E9CA2024F1B4A5B10BF5FC79766CBEDDA14A5F3712483582AB711502E83CA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-28_f7a74c3b130a7c87c24b6eb5e3655c2e_elex_mespinoza

.exe 13.9MB

2026-07-28_f7a74c3b130a7c87c24b6eb5e3655c2e_elex_mespinoza

SHA256 b52c187acb5b4c3b9e1f42c4710749996afc66299d103dbf638827b85a2e5d29
MD5 f7a74c3b130a7c87c24b6eb5e3655c2e
SHA1 2b994bff76f8d0ece2d90d7ab67a77ad8144bbef
SHA512 a7def11178f000087181ae3cd2111b2903196e0433434425ffe04bc8bac0ef3c1825d10013f2df284f347650c2c41581b186ec469d06db3de6db42ff8392c159
SSDEEP 393216:6dq77N/PFfcf+pHAr2ZyfJniNXzxA7eBfzqNt:6MXZZY9ixzqyfzqNt
TLSH
T1C0E63377E9CA2024F1B4A5B10BF5FC79766CBEDDA14A5F3712483582AB711502E83CA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

83:59:d5:77:49:97:08:5a:fe:c9:33:81:ce:58:16:e8:d9:ff:80:50:7f:28:4e:e1:8a:a7:b5:e7:9e:97:7b:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

Chains

Oct 30, 2020

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

31:68:00:14:a1:09:55:2d:11:c8:28:d0:e9:4c:60:95:f3:7a:b5:d4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

Chains

Oct 30, 2020

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

Serial Number

7e:98:c4:2b:3b:a9:c8:a0:ea:95:ee:e6:fb:39:23:9f

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 8, 2020 - Jul 8, 2021

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 12, 2019 - Dec 31, 2028

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

788KB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

221KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

5KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

24KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12.4MB

Virtual Size

40.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

59KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

430KB

Virtual Size

432KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_f7a74c3b130a7c87c24b6eb5e3655c2e_elex_mespinoza

generic