26f2766df40cee3c670b6c5292706458 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f2766df40cee3c670b6c5292706458
Size

432KB
MD5

26f2766df40cee3c670b6c5292706458
SHA1

77bde8e2fb470530dafe020fe882c42597762ec8
SHA256

f142b1ed07fa4f260df583743076b6f5825bb9598d0c1353cbe17fd62b3f40f6
SHA512

50b08be79473172cbe66daa2bcb9fe71def16d931eaaac1a0457f906fc18027f89b847f0e359f3c4aef1b089636cad84e6d4faff9a650c1727b95eaa85364c5e
SSDEEP

6144:9RWmX6dXzik9RBPstPGpWDF3fuyG64gJ8L9T8jUx/TDDdBnbfqOplSPY5y9BlkES:9HX2XWIoMyGPU4mUJHfFpOiy9BlkiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f2766df40cee3c670b6c5292706458

Files

26f2766df40cee3c670b6c5292706458
.exe windows:4 windows x86 arch:x86

6747edd1128b648f5d37bcc3ee6640bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_MergeMenus

ntdll

ZwSetDefaultUILanguage

user32

WINNLSGetEnableStatus
CallMsgFilterA
GetClipboardSequenceNumber
GetCaretBlinkTime
GetCursor

Sections

.text
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE