026be00b6796ea13a38950d3da1b5dee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026be00b6796ea13a38950d3da1b5dee
Size

63KB
MD5

026be00b6796ea13a38950d3da1b5dee
SHA1

4b4a8c0d546694172cb4333e0dd0b35a179e4178
SHA256

53c1a7737b42a5279e74a3cb01e8d006a078a4c5fdc09f2dafff7de2d084b89f
SHA512

b4f50ca97f1c8cbe196c6a90761e0f1acd5b1c3a10a89125f942ca1705bcdbb3fa90e7b2f399eff46ff0409ee028fb3d579c6190b3d132a01ed4a80c17a4e734
SSDEEP

1536:TvT6QJG/eVBFSaZmQbYJtkH85iepQcGYCODfLNd+8IM3jhXdLiC3Vu4kb:jT6QJY0QgkrkcjpDGYCGDNk8hxdLiC3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026be00b6796ea13a38950d3da1b5dee

Files

026be00b6796ea13a38950d3da1b5dee
.exe windows:4 windows x86 arch:x86

4430049d897986c853346976237f6bbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueue
EnterCriticalSection
GetStartupInfoA
CancelIo
WriteProfileSectionW
RemoveLocalAlternateComputerNameA
GetSystemWow64DirectoryW
BaseCleanupAppcompatCache
OpenSemaphoreA
GetShortPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE