2026-10-22_31ec7f128580fb19fe725155d5c231c9_glassworm_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_31ec7f128580fb19fe725155d5c231c9_glassworm_mespinoza
Size 2.1MB
Sample261024-vxajsabs5y
SHA256 c119539ca9c1c7b6bdcc29c687826e4130fdd64173a03cd769dd3cb07e87bdd4
MD5 31ec7f128580fb19fe725155d5c231c9
SHA1 6cf96fb7383dd70b479e8f3818366482ad54b90e
SHA512 0e4ce7231e06495a561a278053bcbf7867dbbed0a39ba72fe248ee6a9de2c0f3f85dc6f2f5c7897b052386d5ed513080865beb700058d97837f22c923369750f
SSDEEP 49152:G/+u4NAyN/T+qdjbQr4qRsNQG/9RmH4fjr47SD5ze:1dyZoz/rFIW1z
TLSH
T106A5BF252A2480E5E152D0B8C401EE9BF2B37841573186EB95E79E2FBFB77D1293F211
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_31ec7f128580fb19fe725155d5c231c9_glassworm_mespinoza

File Explorer

2026-10-22_31ec7f128580fb19fe725155d5c231c9_glassworm_mespinoza

.exe 2.1MB

2026-10-22_31ec7f128580fb19fe725155d5c231c9_glassworm_mespinoza

IMPHASH c2e11d16edb315a62160f0889a888a3d
SHA256 c119539ca9c1c7b6bdcc29c687826e4130fdd64173a03cd769dd3cb07e87bdd4
MD5 31ec7f128580fb19fe725155d5c231c9
SHA1 6cf96fb7383dd70b479e8f3818366482ad54b90e
SHA512 0e4ce7231e06495a561a278053bcbf7867dbbed0a39ba72fe248ee6a9de2c0f3f85dc6f2f5c7897b052386d5ed513080865beb700058d97837f22c923369750f
SSDEEP 49152:G/+u4NAyN/T+qdjbQr4qRsNQG/9RmH4fjr47SD5ze:1dyZoz/rFIW1z
TLSH
T106A5BF252A2480E5E152D0B8C401EE9BF2B37841573186EB95E79E2FBFB77D1293F211
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

573792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

K:\Dev\B-489\Bin.Win\Release_Win64\GIGen\GIGen.pdb

libpng15

png_get_valid png_set_longjmp_fn png_create_info_struct png_read_info png_set_expand png_set_packing png_set_interlace_handling png_set_strip_16 png_set_gamma png_read_update_info png_read_rows png_read_end png_get_IHDR png_get_gAMA png_create_read_struct png_set_read_fn png_destroy_read_struct

libxml

xmlIndentTreeOutput xmlFreeDoc xmlNewProp xmlNewNode xmlNewChild xmlDocSetRootElement xmlByteConsumed xmlParseChunk xmlCreatePushParserCtxt xmlFreeParserCtxt xmlStopParser xmlStrcmp xmlDocGetRootElement xmlNodeAddContent xmlSaveFormatFile xmlInitParser xmlCleanupParser xmlParseMemory xmlNewDoc

kernel32

GlobalAlloc GlobalSize GlobalLock GlobalUnlock GlobalFree CreateDirectoryW DeleteFileW OutputDebugStringW CreateProcessW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetVersionExW GetModuleHandleW LocalFree GetCommandLineW CopyFileW CloseHandle GetModuleFileNameW FormatMessageW VerSetConditionMask GetLastError GlobalMemoryStatusEx GetTempPathW RemoveDirectoryW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetProcAddress CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetNativeSystemInfo SetCurrentDirectoryW GetUserDefaultLocaleName GetLocaleInfoW WideCharToMultiByte VerifyVersionInfoW

user32

CreateWindowExW DestroyWindow ShowWindow SetWindowPos SetFocus UpdateWindow SetForegroundWindow GetDC ReleaseDC GetClientRect PostQuitMessage DefWindowProcW SendMessageW GetKeyNameTextW wsprintfW MessageBoxA GetSystemMetrics TrackMouseEvent TranslateMessage ChangeDisplaySettingsW LoadCursorW GetDesktopWindow SetWindowLongW RegisterClassW ScreenToClient ClientToScreen GetCursorPos SetCursorPos ShowCursor AdjustWindowRectEx GetWindowRect PeekMessageW DispatchMessageW

gdi32

SwapBuffers SetPixelFormat GetPixelFormat DescribePixelFormat ChoosePixelFormat TextOutW TextOutA CreateDIBSection SetTextColor SetBkMode SetBkColor SelectObject GetTextExtentPoint32W GetTextExtentPoint32A FloodFill DeleteDC CreateFontW CreateCompatibleDC

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegEnumValueW RegCreateKeyExW RegQueryValueExA RegOpenKeyExA GetUserNameW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegDeleteKeyW RegEnumKeyExW RegDeleteValueW RegCloseKey

shell32

ExtractIconW SHFileOperationW ShellExecuteW CommandLineToArgvW SHGetFolderPathW DragQueryFileW SHCreateDirectoryExW

ole32

OleUninitialize OleInitialize ReleaseStgMedium RevokeDragDrop RegisterDragDrop CoTaskMemFree CoCreateInstance CoLockObjectExternal CoInitializeEx CoUninitialize CreateStreamOnHGlobal

msvcp140

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?uncaught_exception@std@@YA_NXZ ??Bid@locale@std@@QEAA_KXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?_BADOFF@std@@3_JB ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ?_Xbad_function_call@std@@YAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

dinput8

DirectInput8Create

gdiplus

GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipSaveImageToStream GdipGetImageGraphicsContext GdipGetImageBounds GdipImageRotateFlip GdipCreateBitmapFromScan0 GdipDeleteGraphics GdipDrawImageRectRect GdipGetImageEncodersSize GdipGetImageEncoders GdipSaveImageToFile GdipBitmapLockBits GdipBitmapUnlockBits GdiplusShutdown

opengl32

glDisableClientState glDrawElements glEnableClientState glVertexPointer glTexCoordPointer glClearColor glScissor glNormalPointer glMaterialfv glMaterialf glLightfv glDrawArrays glDepthMask glColorPointer glTexParameterfv glRasterPos2i glLightModelfv wglGetCurrentDC glClearStencil glColor4ubv wglMakeCurrent wglDeleteContext wglCreateContext glClearDepth glStencilMask glTexEnvi glColor3ub wglGetProcAddress glTexParameteri glTexParameterf glTexCoord2i glShadeModel glNewList glMultMatrixf glHint glGetTexLevelParameteriv glGetError glGenLists glFrontFace glEndList glDepthRange glDepthFunc glDeleteLists glCullFace glLineWidth glColor4f glReadPixels glGetIntegerv glColorMask glDisable glEnable glGetBooleanv glPolygonOffset glStencilFunc glStencilOp glTexEnvfv glTexSubImage2D glDrawBuffer glDeleteTextures glGenTextures glReadBuffer glTexImage2D glBegin glClear glColor3f glViewport glColor4ub glEnd glGetString glLoadIdentity glLoadMatrixf glMatrixMode glOrtho glScalef glTexCoord2f glVertex2i glPopMatrix glPushMatrix glTranslatef glLineStipple glVertex3fv glBindTexture glBlendFunc glClearAccum

vcruntime140

memmove _CxxThrowException __CxxFrameHandler3 memcpy strchr __intrinsic_setjmp __vcrt_InitializeCriticalSectionEx __C_specific_handler longjmp strstr __RTDynamicCast __std_exception_destroy __std_exception_copy _purecall memchr memcmp __std_terminate memset strrchr

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _seh_filter_exe _set_app_type _register_onexit_function _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _configure_narrow_argv terminate _invalid_parameter_noinfo_noreturn _initialize_onexit_table _invalid_parameter_noinfo system perror _errno

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode realloc malloc

api-ms-win-crt-convert-l1-1-0

strtol atof atoi _wtoi

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s _lock_file _unlock_file _wmakepath_s _wrename

api-ms-win-crt-stdio-l1-1-0

_ftelli64 __acrt_iob_func __p__commode _set_fmode __stdio_common_vfwprintf __stdio_common_vswprintf_s __stdio_common_vsprintf_s fread __stdio_common_vsprintf fgetpos fsetpos fseek ftell _wfopen fwrite __stdio_common_vsscanf fopen ungetc setvbuf _fseeki64 fputc fgetc fflush fclose _get_stream_buffer_pointers fopen_s __stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

strncpy wcsncmp tolower strcmp _strlwr

api-ms-win-crt-math-l1-1-0

asinf acosf atan2f floorf sqrtf sinf fmodf tanf ceil cosf log10 log10f floor ceilf __setusermatherr

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64 _ctime64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale setlocale

Name

.text

Size

947KB

Virtual Size

946KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

315KB

Virtual Size

315KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

283KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=2, id=199, version=41118,

count=3, id=259, version=24123,

count=13, id=260, version=24123,

count=4, id=257, version=24123,

count=31, id=261, version=24123,

count=5, id=244, version=40116,

count=24, id=239, version=40116,

count=1, id=173, version=30319,

count=2, id=257, productName=VS2015 UPD2 build 23918, version=23918,

count=3, id=257, productName=VS2015 UPD1 build 23506, version=23506,

count=481, id=1, productName=Unmarked objects,

count=106, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,