26ff9fac70d9f1dee45b58393c0d16233f8e076e339af8428ff54ce29d67b8d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ff9fac70d9f1dee45b58393c0d16233f8e076e339af8428ff54ce29d67b8d8
Size

94KB
MD5

6806742171b027b18b67ee017cc3c522
SHA1

b40f656a8ac779f915ca61b67189b6663f2af674
SHA256

26ff9fac70d9f1dee45b58393c0d16233f8e076e339af8428ff54ce29d67b8d8
SHA512

ecfe904d585c3ae5e7159244d0c5ec0c20d299186679b6cf92112aff8fa2cf5afefd23eb5f970187228b6641222a492a290a855eb4245e5b72095fa0e27d417c
SSDEEP

1536:XqydL9LVFIe4NckITXXazD9yCku8BKyL6wD6yc8YaEJwZK4/83ZoMOALF6SSf:XqqL9LV/sjklkyLR+yhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

26ff9fac70d9f1dee45b58393c0d16233f8e076e339af8428ff54ce29d67b8d8
.exe windows x86

67a022153301560e0ca7090f733a751a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
GetNumaNodeProcessorMask
SetVolumeMountPointW
ExpungeConsoleCommandHistoryA
lstrcmpiA
HeapUnlock
IsValidLocale
ReplaceFileA
OpenEventA
GetLongPathNameA
FindFirstChangeNotificationA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE