2026-09-27_55542d5f81fdd058b67487631adcb04a_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-27_55542d5f81fdd058b67487631adcb04a_conti
Size 544KB
Sample260928-yncjkatv2m
SHA256 f8a46cfa672fe5a058cad15612c45a737ef5e68fd15f0dc5846ad1c6db04701e
MD5 55542d5f81fdd058b67487631adcb04a
SHA1 1ebe064d07da01b5451f9ed26b5fbef40d4aa077
SHA512 c27052241b83dbfa9623e7763945f79f0264e2ba8b3b6556979aff6d1aceb587b0dffa28aa9965e6073a63ad04b8703bf5668b453ba6135ee5e5643e5d8dcd8a
SSDEEP 6144:oBjvcD9FceJabuNcHnYM4cqogtxncFGyrmUP2Q43dd0M2XUq:oBrcD9VJg+eIoRX23P05XUq
TLSH
T181C44A1BF79318FCC227D17483B69B72B931B8590320BE6F5A98D7321E31D505B7AA24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-27_55542d5f81fdd058b67487631adcb04a_conti

File Explorer

2026-09-27_55542d5f81fdd058b67487631adcb04a_conti

.exe 544KB

2026-09-27_55542d5f81fdd058b67487631adcb04a_conti

IMPHASH f922c399f225c3a9e785d09420b56249
SHA256 f8a46cfa672fe5a058cad15612c45a737ef5e68fd15f0dc5846ad1c6db04701e
MD5 55542d5f81fdd058b67487631adcb04a
SHA1 1ebe064d07da01b5451f9ed26b5fbef40d4aa077
SHA512 c27052241b83dbfa9623e7763945f79f0264e2ba8b3b6556979aff6d1aceb587b0dffa28aa9965e6073a63ad04b8703bf5668b453ba6135ee5e5643e5d8dcd8a
SSDEEP 6144:oBjvcD9FceJabuNcHnYM4cqogtxncFGyrmUP2Q43dd0M2XUq:oBrcD9VJg+eIoRX23P05XUq
TLSH
T181C44A1BF79318FCC227D17483B69B72B931B8590320BE6F5A98D7321E31D505B7AA24
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

483328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AllocateAndInitializeSid CryptAcquireContextW CryptGenRandom CryptReleaseContext FreeSid GetSecurityInfo GetTokenInformation InitializeSecurityDescriptor OpenProcessToken OpenThreadToken SetEntriesInAclW SetSecurityDescriptorDacl

kernel32

CancelIo CloseHandle ConnectNamedPipe CreateConsoleScreenBuffer CreateEventW CreateFileW CreateNamedPipeW CreateProcessW DeleteCriticalSection DuplicateHandle EnterCriticalSection FillConsoleOutputAttribute FillConsoleOutputCharacterW FormatMessageA FreeLibrary GenerateConsoleCtrlEvent GetCommandLineW GetConsoleCP GetConsoleCursorInfo GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetConsoleTitleW GetConsoleWindow GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetLargestConsoleWindowSize GetLastError GetModuleFileNameA GetModuleHandleW GetOverlappedResult GetProcAddress GetStdHandle GetSystemDirectoryW GetSystemTimeAsFileTime GetThreadId GetTickCount GetVersionExW InitializeConditionVariable InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree MultiByteToWideChar RaiseException ReadConsoleInputW ReadConsoleOutputW ReadFile ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetConsoleCursorPosition SetConsoleMode SetConsoleScreenBufferSize SetConsoleTextAttribute SetConsoleTitleW SetConsoleWindowInfo SetLastError SetNamedPipeHandleState SetUnhandledExceptionFilter Sleep SleepConditionVariableCS TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleInputW WriteConsoleOutputW WriteFile

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock _onexit _read _strtoi64 _unlock abort atoi calloc exit fflush fprintf fputc fputs free fwrite getenv localeconv malloc memchr memcmp memcpy memmove memset realloc signal strchr strcmp strerror strlen strncmp strrchr strtoul vfprintf wcscmp wcslen wcsncmp

shell32

CommandLineToArgvW

user32

CloseDesktop CloseWindowStation CreateDesktopW CreateWindowStationW GetDoubleClickTime GetProcessWindowStation GetThreadDesktop GetUserObjectInformationW MapVirtualKeyW PostMessageW SendMessageW SetProcessWindowStation VkKeyScanW

Name

.text

Size

260KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcdf1b

Size

124KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-27_55542d5f81fdd058b67487631adcb04a_conti

advapi32

kernel32

msvcrt

shell32

user32

generic