00bf26c3ffb18f4eb1547d035d38977a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00bf26c3ffb18f4eb1547d035d38977a
Size

68KB
MD5

00bf26c3ffb18f4eb1547d035d38977a
SHA1

3e06f5f44af83b09494c425cb653f2447dc2ae5e
SHA256

818d455c967bc5ca2637e14bcd330bb8c6f0e00f34009d27b2a922f0193808d4
SHA512

3f87c2d7da4545706921228bc95478d6b3593e88abee51630103b15471bfc45d71eb73f64e630c4a52cfbd5b49396b295b107499e872e43ef4940275b65fe435
SSDEEP

1536:ndMzV2Am5brhF69NXhmNqWCUL3IfEHS7LD01jBwLUMo8C:ndMF+oRM4fB3vLUMoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00bf26c3ffb18f4eb1547d035d38977a

Files

00bf26c3ffb18f4eb1547d035d38977a
.exe windows:5 windows x86 arch:x86

3f2e0e8a2aaa3edb9f9b6ab55758582c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleHandleW
GetTickCount
GetModuleHandleA
GetModuleFileNameA
LocalFree
SetUnhandledExceptionFilter
VirtualAllocEx
GetCurrentThreadId
SetEvent

gdi32

GetTextMetricsW
DeleteDC
DeleteObject

user32

LockWindowStation
GetWindowRect
GetDlgItem
PostMessageW
ShowWindow

Sections

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ