2026-08-09_894991138196d7c5a3b1582dbecdfeb1_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_894991138196d7c5a3b1582dbecdfeb1_conti
Size 274KB
Sample260809-fxp7xavset
SHA256 d3fae0d7b11f62d64a02491f13f8259aeebf2ec5411f2e60cda3347851c86e4b
MD5 894991138196d7c5a3b1582dbecdfeb1
SHA1 9045d4f3ede1d85999496aefee39914cbf28c2a0
SHA512 14ef65426b758a212529c8b951d7649f95cdd2151148660b83e57d3259a0f76d3395970945f7f7b75e4af0853f7870de12b2e8587e9ffba16c9581f149381e6e
SSDEEP 3072:RW5HRlVYcZzocTfr8SYPtL6LlVERnJ3vi09/6+V1qZcUY2EtZo7FUY6+WSvm:RIl1ZzWD609/6+zUYC7K
TLSH
T16754291BF3931CFCD627D17982A6DB71A931B8250364EE6F4994D7331E32C540E6AA38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_894991138196d7c5a3b1582dbecdfeb1_conti

File Explorer

2026-08-09_894991138196d7c5a3b1582dbecdfeb1_conti

.exe 274KB

2026-08-09_894991138196d7c5a3b1582dbecdfeb1_conti

IMPHASH bf1d81877347ac6fcaed73f94e4555a7
SHA256 d3fae0d7b11f62d64a02491f13f8259aeebf2ec5411f2e60cda3347851c86e4b
MD5 894991138196d7c5a3b1582dbecdfeb1
SHA1 9045d4f3ede1d85999496aefee39914cbf28c2a0
SHA512 14ef65426b758a212529c8b951d7649f95cdd2151148660b83e57d3259a0f76d3395970945f7f7b75e4af0853f7870de12b2e8587e9ffba16c9581f149381e6e
SSDEEP 3072:RW5HRlVYcZzocTfr8SYPtL6LlVERnJ3vi09/6+V1qZcUY2EtZo7FUY6+WSvm:RIl1ZzWD609/6+zUYC7K
TLSH
T16754291BF3931CFCD627D17982A6DB71A931B8250364EE6F4994D7331E32C540E6AA38
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

275968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AllocateAndInitializeSid FreeSid GetSecurityInfo GetTokenInformation InitializeSecurityDescriptor OpenProcessToken OpenThreadToken SetEntriesInAclW SetSecurityDescriptorDacl

kernel32

CloseHandle ConnectNamedPipe CreateFileW CreateNamedPipeW DeleteCriticalSection DisconnectNamedPipe EnterCriticalSection FormatMessageA FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetLastError GetModuleFileNameA GetModuleHandleW GetProcAddress GetSystemDirectoryW GetSystemTimeAsFileTime GetThreadId GetVersionExW InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree MultiByteToWideChar RaiseException ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetLastError SetNamedPipeHandleState SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryEnterCriticalSection VirtualProtect VirtualQuery WaitNamedPipeW WideCharToMultiByte WriteFile

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _assert _cexit _commode _errno _fmode _initterm _lock _onexit _read _unlock abort calloc exit fflush fprintf fputc fputs free fwrite getenv localeconv malloc memchr memcmp memcpy memmove memset realloc signal strchr strcmp strerror strlen strncmp strrchr strtoul vfprintf wcslen wcstombs

Name

.text

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_894991138196d7c5a3b1582dbecdfeb1_conti

advapi32

kernel32

msvcrt

generic