26bd5941a5eace0d63ff5c1d7edcbd5eceb4312fe08d0452fcf61ffcd6f91876

Sharing

Copy URL Twitter E-mail

General

Target

26bd5941a5eace0d63ff5c1d7edcbd5eceb4312fe08d0452fcf61ffcd6f91876
Size

286KB
MD5

b5145678fb1f0085f1447fefefc82d5c
SHA1

26b1c6f5fdf3ce0fd8b91bd7f1a5f8718e70ee2c
SHA256

26bd5941a5eace0d63ff5c1d7edcbd5eceb4312fe08d0452fcf61ffcd6f91876
SHA512

e86690cd5be4e380c139a298e8849376dc96445c70d9de72be1a706dc4ab554f0537c9308b3b87b1a84400759e40b0270c4c649cf2ad269e5a33d16dba2b8b4d
SSDEEP

3072:NswsniRQHSC5lzoFs2qNpQnY8mUkwr7bCu9j4Acy+AccN1W5OaYlb:KBzlziqoYCriAcy+Accda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26bd5941a5eace0d63ff5c1d7edcbd5eceb4312fe08d0452fcf61ffcd6f91876

Files

26bd5941a5eace0d63ff5c1d7edcbd5eceb4312fe08d0452fcf61ffcd6f91876
.dll windows:5 windows x86

87164e6adc38254c5c36b4a17eb9f0fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
InterlockedDecrement
GetLastError
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileSectionA
GetPrivateProfileSectionA
InterlockedIncrement
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
WideCharToMultiByte
GetCurrentProcess
FindClose
FindFirstFileA
GetCurrentThreadId
CloseHandle
CreateFileA
GetModuleFileNameA
SetLastError
GetModuleHandleA
TerminateProcess
InitializeCriticalSectionAndSpinCount
Sleep
lstrlenA
GetTickCount
LocalFree
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CompareStringA
WriteConsoleW
HeapSize
GetStringTypeW
GetStringTypeA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
GetLocaleInfoA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
FlushFileBuffers
ReadFile
GetStartupInfoA
GetFileType
InterlockedExchange
HeapFree
GetProcessHeap
RtlUnwind
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetTimeZoneInformation
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
WriteFile
GetConsoleCP
GetConsoleMode
ExitProcess
GetStdHandle
SetHandleCount

user32

wsprintfA

ole32

CoInitialize
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysFreeString

Exports

Exports

CreatePluginInstance
DeletePluginInstance

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87164e6adc38254c5c36b4a17eb9f0fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 6KB - Virtual size: 13KB

.reloc Size: 41KB - Virtual size: 41KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 6KB - Virtual size: 13KB

.reloc
Size: 41KB - Virtual size: 41KB