26e5db523a3cd0d001036697009d6b57 | Triage

Sharing

General

Target

26e5db523a3cd0d001036697009d6b57
Size

128KB
MD5

26e5db523a3cd0d001036697009d6b57
SHA1

763a2801a2b3b51102c33353e3d94d9bd8790108
SHA256

5494bedbabee9dc2005bf5e0411e8de421d3caa505a1f6b393a70b7a73f7dc94
SHA512

37c632b6737bf29265be4c17282c3ef89dac0e8ef3c54e8afe6c4c6e7ebe63e136a6d82a87a803ddbabce90b888aec96fc41913a7f2f62ab20d74a9ae2128302
SSDEEP

3072:6EBlFKqbQ5y/3KaR5HoYN08VA4zl3uWy/3KaR5Ho:64fFkI/6aToYN0SA4Qf/6aTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e5db523a3cd0d001036697009d6b57

Files

26e5db523a3cd0d001036697009d6b57
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ