2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti
Size 238KB
Sample260825-1pcbaswvh1
SHA256 37b417cb2614a7175fb23947d601f8d7ab0df0b1f8b2a88c7a456890f0e3bd12
MD5 d18a48ef8ac7b189765d7d8d0dca4775
SHA1 f177b6fabc280da50bfecf99fe1e0965fd7e4961
SHA512 49864a081d85df37451cb708bae251ef121d6335241adee927f280f279b284b5dc5e979cd3e26933543e246a6debc57199b8625f40600fb2d62e43cc169f3802
SSDEEP 3072:3ytmucwrWcU5mPco0dn17zxohseDvIQt8U1mtzcvfN73pbqT6H8fO7pQz7duQ2Dr:3ytIx+AgbftOnshTNeuo2RU3Va4zlI
TLSH
T1E9341B0B73532CF8CAABC03982E69771B572B4560324FE6F0794CB333E62D554A6DA25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti

File Explorer

2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti

.exe 238KB

2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti

IMPHASH 7e199593479f6185e3b470b16420de15
SHA256 37b417cb2614a7175fb23947d601f8d7ab0df0b1f8b2a88c7a456890f0e3bd12
MD5 d18a48ef8ac7b189765d7d8d0dca4775
SHA1 f177b6fabc280da50bfecf99fe1e0965fd7e4961
SHA512 49864a081d85df37451cb708bae251ef121d6335241adee927f280f279b284b5dc5e979cd3e26933543e246a6debc57199b8625f40600fb2d62e43cc169f3802
SSDEEP 3072:3ytmucwrWcU5mPco0dn17zxohseDvIQt8U1mtzcvfN73pbqT6H8fO7pQz7duQ2Dr:3ytIx+AgbftOnshTNeuo2RU3Va4zlI
TLSH
T1E9341B0B73532CF8CAABC03982E69771B572B4560324FE6F0794CB333E62D554A6DA25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

gdi32

CreateFontW CreatePen CreateSolidBrush DeleteObject LineTo MoveToEx SelectObject SetBkMode SetTextColor TextOutW

gdiplus

GdipAlloc GdipCloneImage GdipCreateBitmapFromScan0 GdipCreateFromHDC GdipCreatePen1 GdipDeleteGraphics GdipDeletePen GdipDisposeImage GdipDrawEllipseI GdipDrawImageRectI GdipDrawLineI GdipFree GdipGetImageGraphicsContext GdipGraphicsClear GdiplusShutdown GdiplusStartup

kernel32

CloseHandle CreateDirectoryA CreateEventA CreateFileA CreateProcessA CreateSemaphoreA CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DuplicateHandle EnterCriticalSection FormatMessageA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesA GetFileSize GetHandleInformation GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoA GetSystemTimeAsFileTime GetTempPathA GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByte IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LocalFree OpenProcess OutputDebugStringA Process32First Process32Next QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ReplaceFileA ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteFile

msimg32

GradientFill

api-ms-win-crt-convert-l1-1-0

mbrtowc mbsrtowcs strtoul wcrtomb

api-ms-win-crt-environment-l1-1-0

__p__environ getenv

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale localeconv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

__C_specific_handler __intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _assert _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _errno _exit _initialize_narrow_environment _set_app_type _initterm _initterm_e _set_invalid_parameter_handler abort exit signal strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf _fileno _read _setmode _write fclose fflush fopen fputc fputs fread fseek ftell fwrite

api-ms-win-crt-string-l1-1-0

_strdup _stricmp memset strcmp strlen strncmp strnlen wcslen wcsnlen

api-ms-win-crt-utility-l1-1-0

rand_s

shell32

ShellExecuteExA

user32

BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW DrawTextW EndPaint FillRect GetClientRect GetCursorPos GetMessageW GetSystemMetrics IsWindow LoadCursorA LoadIconA MessageBeep PostMessageW PostQuitMessage RegisterClassW SendMessageW ShowWindow TranslateMessage UpdateWindow

wininet

HttpOpenRequestA HttpSendRequestA InternetCloseHandle InternetConnectA InternetOpenA InternetReadFile

Name

.text

Size

178KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti

gdi32

gdiplus

kernel32

msimg32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

shell32

user32

wininet

generic