2026-10-25_7227e8bf55e5c4753b9148bdc812756d_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_7227e8bf55e5c4753b9148bdc812756d_conti
Size 447KB
Sample261027-aga56aat2k
SHA256 b250eb74ccec670c24677f3326f49e6e570f36f4e91d7483264d67512942d0ee
MD5 7227e8bf55e5c4753b9148bdc812756d
SHA1 53915b789c42509a400a2df2144972382c568ebe
SHA512 728f0a15b5506282752d1e67cd235699c38a5e8233456c6fd64e5084b859174e11c69aed32ace4b93ac87a148c71a4ae74afc9b01a414fa923210cac793fa116
SSDEEP 6144:iCmvKZkPYUg43K38gdccrKeeX1rAGPVp5OicRWBipg5DyII5Ay14Cq7Cr9mmLTve:bWnrhgdceeX9lP/PBipS2A1+bTvZH1G
TLSH
T113A49D71B26C188ADAAD4B3F57DF5320A378FC60AA161F8F383051AC19576D33D4E626
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_7227e8bf55e5c4753b9148bdc812756d_conti

File Explorer

2026-10-25_7227e8bf55e5c4753b9148bdc812756d_conti

.exe 447KB

2026-10-25_7227e8bf55e5c4753b9148bdc812756d_conti

IMPHASH e25de89683535b32c64c924cd70d8c61
SHA256 b250eb74ccec670c24677f3326f49e6e570f36f4e91d7483264d67512942d0ee
MD5 7227e8bf55e5c4753b9148bdc812756d
SHA1 53915b789c42509a400a2df2144972382c568ebe
SHA512 728f0a15b5506282752d1e67cd235699c38a5e8233456c6fd64e5084b859174e11c69aed32ace4b93ac87a148c71a4ae74afc9b01a414fa923210cac793fa116
SSDEEP 6144:iCmvKZkPYUg43K38gdccrKeeX1rAGPVp5OicRWBipg5DyII5Ay14Cq7Cr9mmLTve:bWnrhgdceeX9lP/PBipS2A1+bTvZH1G
TLSH
T113A49D71B26C188ADAAD4B3F57DF5320A378FC60AA161F8F383051AC19576D33D4E626
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4119

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject SelectObject

gdiplus

GdipAlloc GdipCloneBrush GdipCloneImage GdipCreateFromHDC GdipCreateSolidFill GdipDeleteBrush GdipDeleteGraphics GdipDisposeImage GdipDrawImageRectI GdipFillRectangleI GdipFree GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipSetInterpolationMode GdiplusShutdown GdiplusStartup

kernel32

DeleteCriticalSection EnterCriticalSection FindResourceW GetCurrentProcessId GetLastError GetStartupInfoW GlobalAlloc GlobalLock GlobalUnlock InitializeCriticalSection LeaveCriticalSection LoadResource LockResource SetUnhandledExceptionFilter SizeofResource Sleep TlsGetValue VirtualProtect VirtualQuery __C_specific_handler

msvcrt

__iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _commode _fmode _initterm _time64 _wcmdln atexit abort calloc exit fprintf free malloc memcpy rand setvbuf signal srand strlen strncmp vfprintf wcslen

ole32

CoCreateInstance CoInitializeEx CoUninitialize CreateStreamOnHGlobal

user32

BeginPaint CreateWindowExW DefWindowProcW DispatchMessageW EndPaint GetClientRect GetMessageW GetSystemMetrics GetWindowLongPtrW GetWindowRect KillTimer LoadCursorW PostQuitMessage RegisterClassExW RegisterHotKey SetTimer SetWindowLongPtrW SetWindowPos ShowWindow TranslateMessage UnregisterHotKey

Name

.text

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

228KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

132B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

119KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

512B

Virtual Size

376B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_7227e8bf55e5c4753b9148bdc812756d_conti

gdi32

gdiplus

kernel32

msvcrt

ole32

user32

generic