26c584dbe35bfb7066642cb4682cc883fcaf3e46a08114037b0d88a272cf1379 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c584dbe35bfb7066642cb4682cc883fcaf3e46a08114037b0d88a272cf1379
Size

200KB
MD5

772895c430948b037a4974d2e4a53685
SHA1

6c9bcc6a603795a870b5281cc2e6587ad9f882b5
SHA256

26c584dbe35bfb7066642cb4682cc883fcaf3e46a08114037b0d88a272cf1379
SHA512

7170c9d870c3e023c437e443307f857bf50d9d6d18319a40f0528064f635f6e43ade4d6cf146502e6b768f4bd7d3000b089efbf1b8b04131fccc9f09f2be616e
SSDEEP

3072:xaWV4thr9GBNkqfcJMNqDmp4LsFQ6qD7f+IvK6AWA4hE5u7uIQlZG6f3/ENrL:xaLto6yyLdPHvx6f5uFSaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c584dbe35bfb7066642cb4682cc883fcaf3e46a08114037b0d88a272cf1379

Files

26c584dbe35bfb7066642cb4682cc883fcaf3e46a08114037b0d88a272cf1379
.exe windows:4 windows x86

a920c4fd0547e8ea13e8dc7d75bf11ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

gdi32

GetRgnBox

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

shell32

SHAppBarMessage

comctl32

ord17

shlwapi

PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc

oleaut32

SysFreeString

Sections

.text
Size: 159KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE