2026-08-16_eb403e243acb899438e75e36eb844fb5_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_eb403e243acb899438e75e36eb844fb5_conti
Size 259KB
Sample260816-d1xp2sba64
SHA256 7bcbff595c4af47dfbf53d8e988488ac511e4a99a29a01101e7c22903113c800
MD5 eb403e243acb899438e75e36eb844fb5
SHA1 388485e791e9a8acdce9d1757d6ab745c167f8ad
SHA512 23824d21ab66a868c91f66410da3364e75eb3dd6b0033d18f6f97338f52cad1d2c7bcc0b1e786edf62d58cda437e53d59885dea436cf3f486778045ebd46fb16
SSDEEP 6144:SpdrIQRPf5weExlAE3nlrFRszTD8rflGOROvjrx47qSFR:SpFH9ee6DX97sPgrfYOROK7hFR
TLSH
T1D9449D91BAD95CD7DA06123949A78339233DFBD64B839703493872312E13AD1AED734B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_eb403e243acb899438e75e36eb844fb5_conti

File Explorer

2026-08-16_eb403e243acb899438e75e36eb844fb5_conti

.exe 259KB

2026-08-16_eb403e243acb899438e75e36eb844fb5_conti

IMPHASH d4cfa78a05584f184c2cf88cb2726ea7
SHA256 7bcbff595c4af47dfbf53d8e988488ac511e4a99a29a01101e7c22903113c800
MD5 eb403e243acb899438e75e36eb844fb5
SHA1 388485e791e9a8acdce9d1757d6ab745c167f8ad
SHA512 23824d21ab66a868c91f66410da3364e75eb3dd6b0033d18f6f97338f52cad1d2c7bcc0b1e786edf62d58cda437e53d59885dea436cf3f486778045ebd46fb16
SSDEEP 6144:SpdrIQRPf5weExlAE3nlrFRszTD8rflGOROvjrx47qSFR:SpFH9ee6DX97sPgrfYOROK7hFR
TLSH
T1D9449D91BAD95CD7DA06123949A78339233DFBD64B839703493872312E13AD1AED734B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptAcquireContextA CryptDecrypt CryptDestroyKey CryptImportKey CryptReleaseContext CryptSetKeyParam

libgcc_s_seh-1

_Unwind_Resume

kernel32

CloseHandle CreateFileW CreateProcessW ExitProcess GetDiskFreeSpaceExW GetFileAttributesW GetLastError GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemInfo GetTempFileNameW GetTempPathW GlobalMemoryStatusEx IsDBCSLeadByte IsDebuggerPresent SetUnhandledExceptionFilter Sleep VirtualProtect VirtualQuery WriteFile

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vswprintf_s fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

libstdc++-6

_ZSt17__throw_bad_allocv _ZSt20__throw_length_errorPKc _ZdlPvy _Znwy __gxx_personality_seh0

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

122KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

856B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

689B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

512B

Virtual Size

397B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_eb403e243acb899438e75e36eb844fb5_conti

advapi32

libgcc_s_seh-1

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

libstdc++-6

generic