2026-10-27_e83a0c4e3c99f68307bbbd3a6d6bfb2f_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-27_e83a0c4e3c99f68307bbbd3a6d6bfb2f_conti
Size 93KB
Sample261027-3nvglaws4q
SHA256 6ce8044fd7fda63263b86a825bd4530e674801e60fb40afb0fc3432d437744c1
MD5 e83a0c4e3c99f68307bbbd3a6d6bfb2f
SHA1 eb22840712661b36276a87d8fe0be071e41e9d1c
SHA512 7ad6027325d9bd6df045c6e8f2e8716e2b75144cacd8a390f6bfd0462442e44490d33b319cbcaeb39e9c9e954e23688c5a8d1c7142a1b580aa9ea769a9ee5eaf
SSDEEP 1536:MA/DUgr0dJrBWnsufyJm0edo2imUl3WvfHM+tQYNJoM9v9vjW2aKqugA0GQOpQRs:P4fdJrBWnsdJm0L1mUl34Qe9Fy2v7pus
TLSH
T124937B1BE69380FCC617C1B44AA99332F732FC250534677A5BE4DBA21E91E94AF1E701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-27_e83a0c4e3c99f68307bbbd3a6d6bfb2f_conti

File Explorer

2026-10-27_e83a0c4e3c99f68307bbbd3a6d6bfb2f_conti

.exe 93KB

2026-10-27_e83a0c4e3c99f68307bbbd3a6d6bfb2f_conti

IMPHASH 09278891242ad9a3545c67b044655787
SHA256 6ce8044fd7fda63263b86a825bd4530e674801e60fb40afb0fc3432d437744c1
MD5 e83a0c4e3c99f68307bbbd3a6d6bfb2f
SHA1 eb22840712661b36276a87d8fe0be071e41e9d1c
SHA512 7ad6027325d9bd6df045c6e8f2e8716e2b75144cacd8a390f6bfd0462442e44490d33b319cbcaeb39e9c9e954e23688c5a8d1c7142a1b580aa9ea769a9ee5eaf
SSDEEP 1536:MA/DUgr0dJrBWnsufyJm0edo2imUl3WvfHM+tQYNJoM9v9vjW2aKqugA0GQOpQRs:P4fdJrBWnsdJm0L1mUl34Qe9Fy2v7pus
TLSH
T124937B1BE69380FCC617C1B44AA99332F732FC250534677A5BE4DBA21E91E94AF1E701
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cygwin1

__assert_func __cxa_atexit __errno __getreent __locale_ctype_ptr __locale_mb_cur_max __main _dll_crt0 _exit _impure_ptr abort calloc cygwin_detach_dll cygwin_internal dll_dllcrt0 error exit fclose fflush_unlocked fprintf fputs_unlocked free fwrite getc_unlocked getenv getopt_long isatty iswalnum iswcntrl iswprint iswspace malloc mbrtowc mbsinit memchr memcmp memcpy memmove memset nl_langinfo optind posix_memalign printf program_invocation_name program_invocation_short_name putc_unlocked realloc setlocale sprintf strchr strcmp strdup strlen strncmp strnlen strrchr wcwidth write

cyggmp-10

__gmp_printf __gmpz_add_ui __gmpz_clear __gmpz_clears __gmpz_cmp __gmpz_cmp_ui __gmpz_divexact __gmpz_divisible_ui_p __gmpz_fdiv_q_2exp __gmpz_gcd __gmpz_init __gmpz_init_set_si __gmpz_init_set_str __gmpz_init_set_ui __gmpz_inits __gmpz_mod __gmpz_mul __gmpz_powm __gmpz_powm_ui __gmpz_scan1 __gmpz_set __gmpz_set_ui __gmpz_sub __gmpz_sub_ui __gmpz_tdiv_q_2exp __gmpz_tdiv_q_ui

cygiconv-2

libiconv libiconv_close libiconv_open

cygintl-8

libintl_bindtextdomain libintl_gettext libintl_setlocale libintl_textdomain

kernel32

GetACP GetModuleHandleA GetModuleHandleW GetProcAddress

Name

.text

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-27_e83a0c4e3c99f68307bbbd3a6d6bfb2f_conti

cygwin1

cyggmp-10

cygiconv-2

cygintl-8

kernel32

generic