26ef49da703831f3b418ab97e0e645add2a6a2a24abef29be262aa6ecf282e9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ef49da703831f3b418ab97e0e645add2a6a2a24abef29be262aa6ecf282e9d
Size

5.0MB
MD5

04c415cfb9badb576cca15eec1988fb3
SHA1

d2672c42f6cd273f07bfbe802872523edc65fa23
SHA256

26ef49da703831f3b418ab97e0e645add2a6a2a24abef29be262aa6ecf282e9d
SHA512

d83fb5f2c9fbb07d0df5df3945b0a88fe717e0a74829fb8dc99a009439f99f135cb013b970d229f87880d4bb8d1c2bebb27ae91d01bc313d692a2cb024281a31
SSDEEP

98304:JHN8h9LYJfPGk4jwMdPFAZwiN9G/nRrQZe6HZ5levlY35qki1D:DJMwUFEwD9kHzgvl5ke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26ef49da703831f3b418ab97e0e645add2a6a2a24abef29be262aa6ecf282e9d

Files

26ef49da703831f3b418ab97e0e645add2a6a2a24abef29be262aa6ecf282e9d
.exe windows:5 windows x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 4.1MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE