26e2c9d6b282a1fa49d3381e5a8a480c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e2c9d6b282a1fa49d3381e5a8a480c
Size

32KB
MD5

26e2c9d6b282a1fa49d3381e5a8a480c
SHA1

2b9e6bb3b28cc39b1607dae79b253d45f336fb75
SHA256

768fba727ab9df2e9cdf4a18f14533f9d53c5fd97055b31e7652ec89bb433b36
SHA512

7c84e28c336b44cb04facf0f7388e95a03119a89aa06958667a01eadf476959b6cec3194ca1cfc0aadb9ccdbd6957680a3d25f37488d30c7a56f1d1965997675
SSDEEP

384:IqXZhq936Zmt2/Gqx7/7AH4HwwuQaXmmnsV3SIXsS4BTPIwEHd:Bhs6g4G27/762ww9k7IXslBTcHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e2c9d6b282a1fa49d3381e5a8a480c

Files

26e2c9d6b282a1fa49d3381e5a8a480c
.exe windows:4 windows x86 arch:x86

57107572e924581bccfa2baba6f9e624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
Sleep
LocalAlloc
GetLastError
CloseHandle

msvcrt

_adjust_fdiv
_acmdln
__set_app_type
toupper
wcslen
wcschr
wcstoul
exit
_XcptFilter

Sections

.text
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ