266da3b56d1f95a13ba826483f26d3f0 | Triage

Sharing

General

Target

266da3b56d1f95a13ba826483f26d3f0
Size

208KB
MD5

266da3b56d1f95a13ba826483f26d3f0
SHA1

993fa44be5026fac469719291bd310b60bd7b076
SHA256

73fca14ee2ed7ea3d1a149bfbbddcb09c77f891f9db0e9105b63ab89bae931b8
SHA512

e98e25465e3442d7694168640fc0d73b7fc50ab83fecf9c137f8eacb44166f6e0bc2be4e1d0bdeb19b617b9f32f4880c0b6fa066f986c6643e9a263b1e970e8e
SSDEEP

3072:OfbrnCr2AGPSwfYsMdU4+bBKlgqf9NN2oJbBBMm0jlLYrpUhHs/TBfpLVe+BJ:i7TA2VM5+bUlzfN2etBaVYfpLVrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
266da3b56d1f95a13ba826483f26d3f0

Files

266da3b56d1f95a13ba826483f26d3f0
.exe windows:4 windows x86 arch:x86

e984a924ea62ff89a7942057948e731a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
IsBadReadPtr
GetOEMCP
ExitProcess
IsBadHugeReadPtr
LoadLibraryA
VirtualAllocEx
GetACP
GetCommandLineW
ExitThread
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetLastError

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ