2026-08-23_dea7cec05e094b494c5c27980ac41c4c_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_dea7cec05e094b494c5c27980ac41c4c_akira
Size 5.4MB
Sample260825-1evpwszamd
SHA256 e32e59955131a7207956dc794818ba320b6c3d6249be867e87ca66d8ac834cfe
MD5 dea7cec05e094b494c5c27980ac41c4c
SHA1 99345ca45388631584802ca5ea4b56024f5a43df
SHA512 37280d448614329b0ff13ff2b950a0c0ef5a664cb83af62bd56c18e42043f8eab236ddb2f7bf29f9fe40e0ac2b4531d3ac865e264356bb47b7f1a0b4aeaaaa5f
SSDEEP 98304:7HUnjjkrsCoEqtdNabYsL8m8HWggsH1iZhWRGN9KRHzobBkHY:bMjSkdYUslq/gsgv8GN9KVkbeHY
TLSH
T104461201B5A06DADEE47E178829E9336B679B8850733EFBB0176D7301D42A936F1C709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_dea7cec05e094b494c5c27980ac41c4c_akira

File Explorer

2026-08-23_dea7cec05e094b494c5c27980ac41c4c_akira

.exe 5.4MB

2026-08-23_dea7cec05e094b494c5c27980ac41c4c_akira

IMPHASH 30067a1e132678c2575122b6c223a72f
SHA256 e32e59955131a7207956dc794818ba320b6c3d6249be867e87ca66d8ac834cfe
MD5 dea7cec05e094b494c5c27980ac41c4c
SHA1 99345ca45388631584802ca5ea4b56024f5a43df
SHA512 37280d448614329b0ff13ff2b950a0c0ef5a664cb83af62bd56c18e42043f8eab236ddb2f7bf29f9fe40e0ac2b4531d3ac865e264356bb47b7f1a0b4aeaaaa5f
SSDEEP 98304:7HUnjjkrsCoEqtdNabYsL8m8HWggsH1iZhWRGN9KRHzobBkHY:bMjSkdYUslq/gsgv8GN9KVkbeHY
TLSH
T104461201B5A06DADEE47E178829E9336B679B8850733EFBB0176D7301D42A936F1C709
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

CloseHandle IsWow64Process SetUnhandledExceptionFilter Sleep TlsGetValue TlsSetValue FormatMessageW GetLastError GetProcessHeap LoadLibraryExA HeapFree AddVectoredExceptionHandler CancelIo CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileMappingA CreateFileW CreateHardLinkW CreatePipe CreateProcessW CreateSymbolicLinkW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessId GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection InitializeProcThreadAttributeList LeaveCriticalSection LockFileEx MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReadFileEx RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetWaitableTimer SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree UnlockFile UnmapViewOfFile UpdateProcThreadAttribute VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFileEx __C_specific_handler lstrlenW

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm abort atexit calloc exit fflush fprintf free malloc memcmp memcpy memmove memset setvbuf signal strlen strncmp vfprintf

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

ws2_32

GetHostNameW WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv recvfrom select send sendto setsockopt shutdown

Name

.text

Size

709KB

Virtual Size

709KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

154KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_dea7cec05e094b494c5c27980ac41c4c_akira

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

api-ms-win-core-winrt-error-l1-1-0

oleaut32

msvcrt

ntdll

userenv

ws2_32

generic