2026-09-25_979f068fec9ae0269e5dda34bdaa1705_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_979f068fec9ae0269e5dda34bdaa1705_conti
Size 116KB
Sample260925-2e76naaa47
SHA256 7d73fe1945dcee52b386674cffa8b3d384a42333a1829e7dc724d28879e5c8df
MD5 979f068fec9ae0269e5dda34bdaa1705
SHA1 8584769c6a30382ba899bed7e5e55190a18071d2
SHA512 6ead8959f23e8d68891077a170334b87b67ac3e58f3dfc977f097441d5eaf55dc051a321818a0152a6875cf1c5561b3d0e2ec34d79d6d8aa06476917d0ce3845
SSDEEP 3072:8haeE5cC19G2ZFkwxsRpHfmjnAuuH9UY6+WSvm:SaDG0dpuHS
TLSH
T158C38C16D74314FDD11FD17885E39673B932B8264320AEBBA358D7311F30E606F69A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_979f068fec9ae0269e5dda34bdaa1705_conti

File Explorer

2026-09-25_979f068fec9ae0269e5dda34bdaa1705_conti

.exe 116KB

2026-09-25_979f068fec9ae0269e5dda34bdaa1705_conti

IMPHASH 3ffabfd2c8ec79b736165a08fe7cfcf1
SHA256 7d73fe1945dcee52b386674cffa8b3d384a42333a1829e7dc724d28879e5c8df
MD5 979f068fec9ae0269e5dda34bdaa1705
SHA1 8584769c6a30382ba899bed7e5e55190a18071d2
SHA512 6ead8959f23e8d68891077a170334b87b67ac3e58f3dfc977f097441d5eaf55dc051a321818a0152a6875cf1c5561b3d0e2ec34d79d6d8aa06476917d0ce3845
SSDEEP 3072:8haeE5cC19G2ZFkwxsRpHfmjnAuuH9UY6+WSvm:SaDG0dpuHS
TLSH
T158C38C16D74314FDD11FD17885E39673B932B8264320AEBBA358D7311F30E606F69A2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

181242

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

kernel32

CloseHandle ContinueDebugEvent CreateFileW CreateProcessA DebugActiveProcess DeleteCriticalSection EnterCriticalSection ExitProcess FileTimeToSystemTime FormatMessageA GenerateConsoleCtrlEvent GetCPInfo GetCurrentDirectoryA GetCurrentThread GetFileAttributesW GetFileInformationByHandle GetFileSize GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemDirectoryW InitializeCriticalSection LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OpenProcess ReadFile ReadProcessMemory SetConsoleCtrlHandler SetFilePointer SetLastError SetThreadPriority SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WaitForDebugEvent WideCharToMultiByte WriteProcessMemory

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock atexit _setmode _strlwr _strdup _strnicmp _strtoui64 _time64 _unlock abort atoi calloc exit fclose fflush fopen fprintf fputc fputs free getenv isalpha localeconv malloc mbstowcs memcpy memmove perror qsort realloc setvbuf signal strcat strchr strcmp strcpy strcspn strerror strlen strncat strncmp strncpy strpbrk strrchr strstr strtok strtoul vfprintf wcschr wcscmp wcscpy wcslen wcsncat wcsrchr wcstombs

ntdll

NtQueryObject NtSetInformationProcess

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_979f068fec9ae0269e5dda34bdaa1705_conti

advapi32

kernel32

msvcrt

ntdll

generic