26d2da5a169d3d7dab42353d4e0d107e4dec3301ffa10775945d16a4a0c04bea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d2da5a169d3d7dab42353d4e0d107e4dec3301ffa10775945d16a4a0c04bea
Size

2.9MB
MD5

c144c660ef909cbc242738ce12b63301
SHA1

11e8c37c6879def7aa1bd9e74b3f4c32b3ccb842
SHA256

26d2da5a169d3d7dab42353d4e0d107e4dec3301ffa10775945d16a4a0c04bea
SHA512

1a4fbc00243cce4cbde3499e1d3ca0dee10e662b5a2abd7cfa3d983981f4ac2be81cf2bfa443bfea73f55683dbd9d5212f8d6a9460d9f0d90039a3814b88eaf8
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlUtXWcqbbBeU7W:Q+8X9G3vP3AMiWhbXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d2da5a169d3d7dab42353d4e0d107e4dec3301ffa10775945d16a4a0c04bea

Files

26d2da5a169d3d7dab42353d4e0d107e4dec3301ffa10775945d16a4a0c04bea
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ