2026-11-07_c28427bfff11852b8d9aab66b2b577e4_akira

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-07_c28427bfff11852b8d9aab66b2b577e4_akira
Size 608KB
Sample261107-mfb3aaw18m
SHA256 03f8cf4845f691df7d49f198d6093fc0b3b7ae063d0bbb738a218bd872a05bf1
MD5 c28427bfff11852b8d9aab66b2b577e4
SHA1 17b8117854a66371ee358bd117320b09bf740500
SHA512 c4e5d8101d86b97df05d25b56c7fa1d4b3db9951d71b9d048b70c126b1ec471f8dac7665f64e8da6bcd5150bcf0cba5733565eeff5e145f09a97f5d4a6871a3c
SSDEEP 12288:mi7qZkqSLGImcUXLp7dv+BqxHpalt6yIlXrKDJ6w1Y/N2d88Brq:6YbU102i6yIlXmDJle4d1+
TLSH
T142D4BF47B6D555BCE546C038D35B9673BA32B88A0220BDBF12F4DA302F16E552F2CB19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_c28427bfff11852b8d9aab66b2b577e4_akira

File Explorer

2026-11-07_c28427bfff11852b8d9aab66b2b577e4_akira

.exe 608KB

2026-11-07_c28427bfff11852b8d9aab66b2b577e4_akira

IMPHASH 66a6ccd9822a5c17cf79e4696a9d8871
SHA256 03f8cf4845f691df7d49f198d6093fc0b3b7ae063d0bbb738a218bd872a05bf1
MD5 c28427bfff11852b8d9aab66b2b577e4
SHA1 17b8117854a66371ee358bd117320b09bf740500
SHA512 c4e5d8101d86b97df05d25b56c7fa1d4b3db9951d71b9d048b70c126b1ec471f8dac7665f64e8da6bcd5150bcf0cba5733565eeff5e145f09a97f5d4a6871a3c
SSDEEP 12288:mi7qZkqSLGImcUXLp7dv+BqxHpalt6yIlXrKDJ6w1Y/N2d88Brq:6YbU102i6yIlXmDJle4d1+
TLSH
T142D4BF47B6D555BCE546C038D35B9673BA32B88A0220BDBF12F4DA302F16E552F2CB19
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileA CreateFileMappingA CreateFileW CreateToolhelp32Snapshot DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeLibrary GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessHeap GetStdHandle HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar RaiseException ReadFile RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFilePointer SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WriteConsoleW __C_specific_handler

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_c28427bfff11852b8d9aab66b2b577e4_akira

api-ms-win-core-synch-l1-2-0

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

ntdll

generic