2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza

General

Target
2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza
Size 2.6MB
Sample260817-ysf3jsgr7w
SHA256 99206256e96864e788d6be53a9c55d5b73b73ba48ad0118adfbeea28e27e7b3d
MD5 13a5d80c9ee637567367be73adec8f44
SHA1 ab0cef24318d9d1049e5c46b8e16638f728c411d
SHA512 10c07e1a549e2f2fe67d1a493ce1cae4f9369b5575f05f89e2783d897d0fed2c2bcbf8218e4aea7aad1259286e33dec13b4ceb226ce1bff684ffa71b16bee10a
SSDEEP 49152:O35DMnCIjtAybcY/VDkYOMwwnMb4PmyVkDzx:B55qXYOXwnS4rVkDF
TLSH
T165D5B6117ADF9776CC7042308F3C99A801617D50A7E6DE9731993E9EFAB3648292F123
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza

File Explorer

2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza

.exe 2.6MB

2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza

SHA256 99206256e96864e788d6be53a9c55d5b73b73ba48ad0118adfbeea28e27e7b3d
MD5 13a5d80c9ee637567367be73adec8f44
SHA1 ab0cef24318d9d1049e5c46b8e16638f728c411d
SHA512 10c07e1a549e2f2fe67d1a493ce1cae4f9369b5575f05f89e2783d897d0fed2c2bcbf8218e4aea7aad1259286e33dec13b4ceb226ce1bff684ffa71b16bee10a
SSDEEP 49152:O35DMnCIjtAybcY/VDkYOMwwnMb4PmyVkDzx:B55qXYOXwnS4rVkDF
TLSH
T165D5B6117ADF9776CC7042308F3C99A801617D50A7E6DE9731993E9EFAB3648292F123
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

177464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\clview.pdb

Name

.text

Size

183KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

280B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza

generic