26d11403bdba2cac85845e3f94ec8eba

Sharing

Copy URL Twitter E-mail

General

Target

26d11403bdba2cac85845e3f94ec8eba
Size

5.5MB
MD5

26d11403bdba2cac85845e3f94ec8eba
SHA1

59f75c6330b9e8766937f29102522c53ef8dc532
SHA256

e4043719ba2432c1c20fa60e96ebd0ad20e37905d8632230454fe63da86bcc4b
SHA512

2238b2483822ce12736120110be97a6a3ced2e94898f7a382b5a7b5e57463ce89c88acfc364bf4d8e4522b36d98902ef24ffe8324ca8f6ce080729a601845b09
SSDEEP

98304:yK3HQy/5NWq8YwkdSgbhXmXJcJy1Q8EHRGUASHGrtBFhTBSUrnrCvCZ6Ldt+9:Ao2uTdzU5Oy1Q86IUAXtBoU/J6LS9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d11403bdba2cac85845e3f94ec8eba

Files

26d11403bdba2cac85845e3f94ec8eba
.exe windows:6 windows x86 arch:x86

9a11f80522e85d5694d388add1771adb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

UpdateWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

d3d9

Direct3DCreate9

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCompositionWindow

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sosi0
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sosi1
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a11f80522e85d5694d388add1771adb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3d9

dwmapi

imm32

wtsapi32

Sections

.text Size: - Virtual size: 271KB

.rdata Size: - Virtual size: 63KB

.data Size: - Virtual size: 6KB

.sosi0 Size: - Virtual size: 3.2MB

.sosi1 Size: 5.5MB - Virtual size: 5.5MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 271KB

.rdata
Size: - Virtual size: 63KB

.data
Size: - Virtual size: 6KB

.sosi0
Size: - Virtual size: 3.2MB

.sosi1
Size: 5.5MB - Virtual size: 5.5MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 469B