26f46081d64a537f34d1048e49534dfc68302e80701ed36b7a96d61255ef36fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f46081d64a537f34d1048e49534dfc68302e80701ed36b7a96d61255ef36fb
Size

9.3MB
MD5

9e2541fedfbb9d6480931a89de3c47de
SHA1

73bd874cb7faf6bb907d77ed681829fd3db81c4f
SHA256

26f46081d64a537f34d1048e49534dfc68302e80701ed36b7a96d61255ef36fb
SHA512

7431d1473a3091aaf083ae4f9f234a1c111d475a7de13b4579a6aa0339bd7c5594dfad71287c038c138439049a08242b837a94cb7b297f5bbc77f646dd9aeb7f
SSDEEP

196608:slAoHkgmI9QhAXRJWMB7sstRvsWptubpPlagw8AogJ:KvkoRJWMtsstV7pgNPIgw8Ao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f46081d64a537f34d1048e49534dfc68302e80701ed36b7a96d61255ef36fb

Files

26f46081d64a537f34d1048e49534dfc68302e80701ed36b7a96d61255ef36fb
.exe windows:5 windows x86

4f2698e388430cc4104663060d067bf5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

TranslateAcceleratorA

gdi32

GetDeviceCaps

msimg32

TransparentBlt

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ExtractIconA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

uxtheme

GetCurrentThemeName

ole32

OleUninitialize

oleaut32

SysStringLen

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipCreateFromHDC

oleacc

AccessibleObjectFromWindow

imm32

ImmReleaseContext

Sections

.text
Size: 9.2MB - Virtual size: 11.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE