2026-08-30_0739a66278dc25d0dfb5277ec8c8996c_elex_mespinoza

General

Target
2026-08-30_0739a66278dc25d0dfb5277ec8c8996c_elex_mespinoza
Size 2.8MB
Sample260830-155msaap3v
SHA256 e04881121130a16c7a5bdb7887ad869dfe4f0297e952f8fb92a53ae52533a34e
MD5 0739a66278dc25d0dfb5277ec8c8996c
SHA1 bd4eb7f58ad06eb81aafb44778007edeb16c9c08
SHA512 861d24af27c87fa3e6fa58cfcededadb53e8fda0c4ee64adc89ce324d61d199fe75474e867e48cc0c27ceadc196020f98ecc5f07b1c149d9a0ceb01716240d9d
SSDEEP 49152:MmDta40v9MzsNBk9/fw2BwfmM0fGc9IW1dXgfC/MHmgrcY/+:MCs96sNi9XwgwfoOc9IW1dXgfC/MHmge
TLSH
T199D5F7C2B6D39837C95092304941FA9831267FE095277E4BF69A7E8EF7FD680590D322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_0739a66278dc25d0dfb5277ec8c8996c_elex_mespinoza

File Explorer

2026-08-30_0739a66278dc25d0dfb5277ec8c8996c_elex_mespinoza

.exe 2.8MB

2026-08-30_0739a66278dc25d0dfb5277ec8c8996c_elex_mespinoza

SHA256 e04881121130a16c7a5bdb7887ad869dfe4f0297e952f8fb92a53ae52533a34e
MD5 0739a66278dc25d0dfb5277ec8c8996c
SHA1 bd4eb7f58ad06eb81aafb44778007edeb16c9c08
SHA512 861d24af27c87fa3e6fa58cfcededadb53e8fda0c4ee64adc89ce324d61d199fe75474e867e48cc0c27ceadc196020f98ecc5f07b1c149d9a0ceb01716240d9d
SSDEEP 49152:MmDta40v9MzsNBk9/fw2BwfmM0fGc9IW1dXgfC/MHmgrcY/+:MCs96sNi9XwgwfoOc9IW1dXgfC/MHmge
TLSH
T199D5F7C2B6D39837C95092304941FA9831267FE095277E4BF69A7E8EF7FD680590D322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

150292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\selfcert.pdb

Name

.text

Size

153KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

178KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

340B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_0739a66278dc25d0dfb5277ec8c8996c_elex_mespinoza

generic