2026-09-05_772194364ab17ad3dafb3f46336a8d8a_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-05_772194364ab17ad3dafb3f46336a8d8a_mespinoza
Size 1.0MB
Sample260907-ve652adj6t
SHA256 38927b25376efda3e9c3c6a8941e7d1fa46a8e13a1335b4826d1bb6c5ca5b73e
MD5 772194364ab17ad3dafb3f46336a8d8a
SHA1 fca27388f824ea3ef0af77e30733994947c22f03
SHA512 b932bc50f816c3d0e6fc6ebb1e24ef7ed38831d834d82994196b9c3f0c369a0eb42ed99cdbcf1d168bf22dcf8a713aaa0b0ed1ff52862308eb12f7215a059c05
SSDEEP 12288:6Gf6iCeE1S6o0rOfwic5HW00KBZp7O2coKf/JbPpHIi7g2pzabb+0QX:6v1ujC53BZp9od+i7jzabp
TLSH
T16925BDC7A443FB4BC8F6927F60225725666AEB01D30E460FE1B3A6197F910B47B1DB81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-05_772194364ab17ad3dafb3f46336a8d8a_mespinoza

File Explorer

2026-09-05_772194364ab17ad3dafb3f46336a8d8a_mespinoza

.exe 1.0MB

2026-09-05_772194364ab17ad3dafb3f46336a8d8a_mespinoza

IMPHASH c3159b7679a141ffdf46b1ca8082a35e
SHA256 38927b25376efda3e9c3c6a8941e7d1fa46a8e13a1335b4826d1bb6c5ca5b73e
MD5 772194364ab17ad3dafb3f46336a8d8a
SHA1 fca27388f824ea3ef0af77e30733994947c22f03
SHA512 b932bc50f816c3d0e6fc6ebb1e24ef7ed38831d834d82994196b9c3f0c369a0eb42ed99cdbcf1d168bf22dcf8a713aaa0b0ed1ff52862308eb12f7215a059c05
SSDEEP 12288:6Gf6iCeE1S6o0rOfwic5HW00KBZp7O2coKf/JbPpHIi7g2pzabb+0QX:6v1ujC53BZp9od+i7jzabp
TLSH
T16925BDC7A443FB4BC8F6927F60225725666AEB01D30E460FE1B3A6197F910B47B1DB81
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

651264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Hey you! Did you know, this file was protected by FireflyProtector.xyz. Check it out if interested!

d3d9

Direct3DCreate9

user32

ClientToScreen CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard GetCapture GetClientRect GetClipboardData GetCursorPos GetForegroundWindow GetKeyState GetKeyboardLayout GetMessageExtraInfo IsWindowUnicode LoadCursorW MessageBoxA OpenClipboard PeekMessageW PostQuitMessage RegisterClassExW ReleaseCapture ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetWindowLongPtrW ShowWindow TrackMouseEvent TranslateMessage UnregisterClassW UpdateWindow

kernel32

AcquireSRWLockExclusive FreeLibrary GetCurrentProcessId GetCurrentThreadId GetLocaleInfoA GetModuleHandleW GetProcAddress GetStartupInfoW GetSystemTimeAsFileTime GlobalAlloc GlobalFree GlobalLock GlobalUnlock InitializeSListHead LoadLibraryA MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSRWLockExclusive SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable WideCharToMultiByte

shell32

ShellExecuteW

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

vcruntime140

_CxxThrowException __C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context __std_terminate memchr memcmp memcpy memmove memset strchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf _set_fmode _wfopen fclose fflush fread fseek ftell fwrite

api-ms-win-crt-math-l1-1-0

__setusermatherr acosf atan2f ceilf cosf fmodf log logf pow powf sinf sqrtf

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strcmp strlen strncmp strncpy wcslen

api-ms-win-crt-runtime-l1-1-0

_c_exit _cexit _configure_wide_argv _crt_atexit _exit _get_wide_winmain_command_line _initialize_onexit_table _initialize_wide_environment _initterm _initterm_e _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type exit terminate

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

491KB

Virtual Size

491KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

780B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.iNeLftR

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jrcRTxY

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.IOGkiFZ

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dz6AJKc

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.firefly

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-05_772194364ab17ad3dafb3f46336a8d8a_mespinoza

d3d9

user32

kernel32

shell32

imm32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic