26fa4e2f3fd15ec90b2d753155c8e0df40e0a8c9ff90484ca0a7ba1ff3ffee9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26fa4e2f3fd15ec90b2d753155c8e0df40e0a8c9ff90484ca0a7ba1ff3ffee9f
Size

6.9MB
MD5

f86b27693e48bc7c02d426cbf0f1b9be
SHA1

91b7abb9699016c6d15dbc1c47cfe849a93d625d
SHA256

26fa4e2f3fd15ec90b2d753155c8e0df40e0a8c9ff90484ca0a7ba1ff3ffee9f
SHA512

e44787bd3a850aaebab25c8aab7b0f6f4ec01089a26df932b4bd61f3d7524e32ba2af5adbf8c7f57fe0829c57b8496689e17f821686059a7f4ed0cf211af6447
SSDEEP

98304:aCtQAsI29jHcxWjRTp6azZzB8hi4ZoEiAmP+xhctqd60dVADjhSF1O8lw3kBL7l7:XstjRJ/4ZoSQQhtd6sWDlSrM0BLRrzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26fa4e2f3fd15ec90b2d753155c8e0df40e0a8c9ff90484ca0a7ba1ff3ffee9f

Files

26fa4e2f3fd15ec90b2d753155c8e0df40e0a8c9ff90484ca0a7ba1ff3ffee9f
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ