2026-09-27_7c536b08d49e765a93f03656c6bac8d0_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-27_7c536b08d49e765a93f03656c6bac8d0_conti
Size 288KB
Sample260928-ep2ejawsdw
SHA256 d796eb7358ba959beb6eee89298cb9cec4ed9084429eba356c41e2bf7da73d13
MD5 7c536b08d49e765a93f03656c6bac8d0
SHA1 fb8b2202a67fdedff9fa0acf413dcb13e682572c
SHA512 8b1d2547aeee25789c43b6b9d38dea97fa4c2be18fecebb80a608e7a70ac6525ba98d3b379375b8f47bf0754a7064374742172905797146ec16c00bc6fcae33d
SSDEEP 3072:lY4llxBLAePfOqiLgozCv+g/lCE9UY6+WSvmF680Uq:lHBwESEXUq
TLSH
T16B547D16E79214FDD19AC178C9935AB2E632BC090320BFEF5754E2322F71A905F7D622
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-27_7c536b08d49e765a93f03656c6bac8d0_conti

File Explorer

2026-09-27_7c536b08d49e765a93f03656c6bac8d0_conti

.exe 288KB

2026-09-27_7c536b08d49e765a93f03656c6bac8d0_conti

IMPHASH 86cdeefd65ab3051971a323f00aa72ba
SHA256 d796eb7358ba959beb6eee89298cb9cec4ed9084429eba356c41e2bf7da73d13
MD5 7c536b08d49e765a93f03656c6bac8d0
SHA1 fb8b2202a67fdedff9fa0acf413dcb13e682572c
SHA512 8b1d2547aeee25789c43b6b9d38dea97fa4c2be18fecebb80a608e7a70ac6525ba98d3b379375b8f47bf0754a7064374742172905797146ec16c00bc6fcae33d
SSDEEP 3072:lY4llxBLAePfOqiLgozCv+g/lCE9UY6+WSvmF680Uq:lHBwESEXUq
TLSH
T16B547D16E79214FDD19AC178C9935AB2E632BC090320BFEF5754E2322F71A905F7D622
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

192512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libbz2-1

BZ2_bzRead BZ2_bzReadClose BZ2_bzReadGetUnused BZ2_bzReadOpen BZ2_bzWrite BZ2_bzWriteClose64 BZ2_bzWriteOpen BZ2_bzlibVersion

kernel32

DeleteCriticalSection EnterCriticalSection GetCPInfo GetCurrentProcess GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetUnhandledExceptionFilter Sleep TerminateProcess VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

_XcptFilter ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _exit _filelengthi64 _fileno _fileno _fmode _initterm _isatty _lock _setmode _stat64 _time64 _unlock _write abort atexit exit fclose ferror fflush fgetc fgetpos fopen fprintf fputc fread free fseek fsetpos fwrite getenv isspace localeconv malloc memcpy perror remove rewind setvbuf signal strcmp strerror strlen strncmp strncpy strstr ungetc vfprintf wcslen

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcdf1b

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-27_7c536b08d49e765a93f03656c6bac8d0_conti

libbz2-1

kernel32

msvcrt

generic