26a2cbb8e84efda9e4a334f1b04e593f | Triage

Sharing

General

Target

26a2cbb8e84efda9e4a334f1b04e593f
Size

2.3MB
MD5

26a2cbb8e84efda9e4a334f1b04e593f
SHA1

2eeb1db4c61b2fa68b93771f6ddf1342c34390e4
SHA256

f8020d3d293929c0dfa7fa126a88a89a8ef69369ff5469bad8225d782942dbca
SHA512

78f2c995bc9ca2704462a2aa9c35021f2793db4da627a882a841f34d99ce0a56d9b781c45f30edd8abf1a96bf6637fb1ca8009c473deba578689967e4e35bdd1
SSDEEP

24576:NiGI1niWbCzhiAb2xj0Uj8kl/NHMhSyGrk0iFRgYNPHZzD/nApXD1pwuF6mXZgTO:NO1niWbCzh72xj0UjHl/NI+zbnMCZoq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a2cbb8e84efda9e4a334f1b04e593f

Files

26a2cbb8e84efda9e4a334f1b04e593f
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ