2026-08-03_f426c1f8fb2ca540760a4abee8a1d7ba_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_f426c1f8fb2ca540760a4abee8a1d7ba_akira
Size 1.6MB
Sample260804-kw1pgagd85
SHA256 7cf9d2a796c0325e11245c589760b430c1b2157a77a7ca9e42b2bb554993e5dc
MD5 f426c1f8fb2ca540760a4abee8a1d7ba
SHA1 d3299dc6918a68d9342126b068df04358c8b2a29
SHA512 338c3ff6c0acc128662b81462cd0a7b97b7e914603281505a392f24ce915ca26a0955eb200e65df8568046ff63dd22ad138f3604b30d0523b62439310364d196
SSDEEP 49152:E7OMvWjoCkN2j4EOO8wlrHMe9aex+Go9Ba:HononO+JD+JBa
TLSH
T1CB757E112621071FDAA7E276D2BF9339B97933482332EA7B065B89307E579C78B0574C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_f426c1f8fb2ca540760a4abee8a1d7ba_akira

File Explorer

2026-08-03_f426c1f8fb2ca540760a4abee8a1d7ba_akira

.exe 1.6MB

2026-08-03_f426c1f8fb2ca540760a4abee8a1d7ba_akira

IMPHASH f31765d0b35c8f19325b67c6a7c31ea1
SHA256 7cf9d2a796c0325e11245c589760b430c1b2157a77a7ca9e42b2bb554993e5dc
MD5 f426c1f8fb2ca540760a4abee8a1d7ba
SHA1 d3299dc6918a68d9342126b068df04358c8b2a29
SHA512 338c3ff6c0acc128662b81462cd0a7b97b7e914603281505a392f24ce915ca26a0955eb200e65df8568046ff63dd22ad138f3604b30d0523b62439310364d196
SSDEEP 49152:E7OMvWjoCkN2j4EOO8wlrHMe9aex+Go9Ba:HononO+JD+JBa
TLSH
T1CB757E112621071FDAA7E276D2BF9339B97933482332EA7B065B89307E579C78B0574C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

gdi32

SetBkMode SetTextColor TextOutW

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileMappingA CreateFileW CreateHardLinkW CreatePipe CreateProcessW CreateSymbolicLinkW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DuplicateHandle ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetProcessId GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeProcThreadAttributeList LoadLibraryA LoadLibraryExA LockFileEx MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadConsoleW ReadFile ReadFileEx RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnlockFile UnmapViewOfFile UpdateProcThreadAttribute WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFileEx lstrlenW DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

mfplat

MFShutdown MFStartup

mfplay

MFPCreateMediaPlayer

ntdll

NtCreateFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

ole32

CoCreateGuid CoInitializeEx CoUninitialize PropVariantClear

oleaut32

GetErrorInfo SetErrorInfo SysAllocStringLen SysFreeString SysStringLen

propsys

PropVariantToBSTR VariantToPropVariant

user32

BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint GetMessageW GetSystemMetrics GetWindowLongPtrW InvalidateRect LoadCursorW PostQuitMessage RegisterClassExW SetTimer SetWindowLongPtrW ShowWindow TranslateMessage

userenv

GetUserProfileDirectoryW

ws2_32

GetHostNameW WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv recvfrom select send sendto setsockopt shutdown

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp wcslen

Name

.text

Size

767KB

Virtual Size

766KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

173KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_f426c1f8fb2ca540760a4abee8a1d7ba_akira

api-ms-win-core-winrt-error-l1-1-0

gdi32

kernel32

mfplat

mfplay

ntdll

ole32

oleaut32

propsys

user32

userenv

ws2_32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

generic