2026-07-29_091fd8e4c4996ddd6f2f38bac1f4c31a_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_091fd8e4c4996ddd6f2f38bac1f4c31a_akira
Size 665KB
Sample260729-dfswcsvwhw
SHA256 c7865b7e35dfbd70e7c73977bdeb00eb549d6f8ae02a2e0d2e383acb3aec0410
MD5 091fd8e4c4996ddd6f2f38bac1f4c31a
SHA1 56d21ea45152a1d5e35d07aad858068e7d74930e
SHA512 3df1ee9c1b9b55b3440e358f61b77ff844bba412c4a56126b39e3bca563a86cf56eda89100f42871b1a9b33314a6bcd4a396b5ce9a3c0c3c3253ba6d7163a94b
SSDEEP 12288:1U+lRXol9lR2xGh6joylJlspnBVGFLXiQedc+Qm8EmtaO:C8XU9cRoylz6mtaO
TLSH
T174E48D5331A514B9C423C079524B72377336B1436522DBFB7EDC8A386F82EE5AB0A749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_091fd8e4c4996ddd6f2f38bac1f4c31a_akira

File Explorer

2026-07-29_091fd8e4c4996ddd6f2f38bac1f4c31a_akira

.exe 665KB

2026-07-29_091fd8e4c4996ddd6f2f38bac1f4c31a_akira

IMPHASH 2b0c8f625ff6b583113c75640eb2def7
SHA256 c7865b7e35dfbd70e7c73977bdeb00eb549d6f8ae02a2e0d2e383acb3aec0410
MD5 091fd8e4c4996ddd6f2f38bac1f4c31a
SHA1 56d21ea45152a1d5e35d07aad858068e7d74930e
SHA512 3df1ee9c1b9b55b3440e358f61b77ff844bba412c4a56126b39e3bca563a86cf56eda89100f42871b1a9b33314a6bcd4a396b5ce9a3c0c3c3253ba6d7163a94b
SSDEEP 12288:1U+lRXol9lR2xGh6joylJlspnBVGFLXiQedc+Qm8EmtaO:C8XU9cRoylz6mtaO
TLSH
T174E48D5331A514B9C423C079524B72377336B1436522DBFB7EDC8A386F82EE5AB0A749
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CompareStringOrdinal CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DuplicateHandle FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WriteConsoleW WriteFileEx DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

ntdll

NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize

shell32

SHCreateItemFromParsingName

ws2_32

WSACleanup WSAGetLastError WSASocketW WSAStartup accept bind closesocket freeaddrinfo getaddrinfo getsockname listen recv send

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm abort atexit calloc exit fprintf free malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

Name

.text

Size

276KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

239KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

860B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-29_091fd8e4c4996ddd6f2f38bac1f4c31a_akira

kernel32

ntdll

ole32

shell32

ws2_32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

msvcrt

generic