2026-11-06_e8162e07f53b77a483eaaa22f2186c5c_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-06_e8162e07f53b77a483eaaa22f2186c5c_conti
Size 164KB
Sample261107-ysqa8aey8s
SHA256 59366cca5e2810620502197fb4694fd7532e8fc8ed887cc6400a5b9c515d1a51
MD5 e8162e07f53b77a483eaaa22f2186c5c
SHA1 78665024f926711e74b55e0d5ec72f83716923b2
SHA512 f4b60e763bea609c9bad0d5462387ed1d34599abf7cb715b3160b0c1ac6d0b0bb8518796bd8853b7714128b1de843088dffd5b32ff8af6cc138de37d07ee7fa5
SSDEEP 3072:wOSfrdg+uPfaqrDV0N7B9OIyQgSyqbdgo:4dyZrG7IibdV
TLSH
T17FF308D2AACBACE7DA92123858E68334233CFAC587864707493966351E537D07EC735B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-06_e8162e07f53b77a483eaaa22f2186c5c_conti

File Explorer

2026-11-06_e8162e07f53b77a483eaaa22f2186c5c_conti

.exe 164KB

2026-11-06_e8162e07f53b77a483eaaa22f2186c5c_conti

IMPHASH 2f000ea9eab14933892330a70040de41
SHA256 59366cca5e2810620502197fb4694fd7532e8fc8ed887cc6400a5b9c515d1a51
MD5 e8162e07f53b77a483eaaa22f2186c5c
SHA1 78665024f926711e74b55e0d5ec72f83716923b2
SHA512 f4b60e763bea609c9bad0d5462387ed1d34599abf7cb715b3160b0c1ac6d0b0bb8518796bd8853b7714128b1de843088dffd5b32ff8af6cc138de37d07ee7fa5
SSDEEP 3072:wOSfrdg+uPfaqrDV0N7B9OIyQgSyqbdgo:4dyZrG7IibdV
TLSH
T17FF308D2AACBACE7DA92123858E68334233CFAC587864707493966351E537D07EC735B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

GetStockObject

kernel32

DeleteCriticalSection EnterCriticalSection GetLastError GetModuleHandleA InitializeCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

__C_specific_handler memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _set_app_type _initterm _initterm_e _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

strlen strncmp

libstdc++-6

_ZSt17__throw_bad_allocv _ZSt20__throw_length_errorPKc _ZSt21__glibcxx_assert_failPKciS0_S0_ _ZSt28__throw_bad_array_new_lengthv _ZdlPvy _Znwy __gxx_personality_seh0

user32

BeginPaint CreateWindowExW DefWindowProcA DestroyWindow DispatchMessageA DrawIcon EndPaint GetCursorPos GetMessageA GetSystemMetrics InvalidateRect KillTimer LoadIconA PostQuitMessage RegisterClassW RegisterHotKey SetLayeredWindowAttributes SetTimer TranslateMessage UnregisterHotKey

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

758B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

512B

Virtual Size

396B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-06_e8162e07f53b77a483eaaa22f2186c5c_conti

gdi32

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

libstdc++-6

user32

generic