26a533c567f1da264dda985625752b9b | Triage

Sharing

General

Target

26a533c567f1da264dda985625752b9b
Size

100KB
MD5

26a533c567f1da264dda985625752b9b
SHA1

3fc6c37023712424eea24cc75742b9fe5017d6fd
SHA256

52a9a311c762667583052e8640f5a5b9058c92b7d7cea07da799e80481e3183e
SHA512

1ba346f937b932784c95399da56d3a658adac5f6b0d24d261b6604d3880dd9d048bb14624b6d8390ced986c9edd2d90e6070b16ac68f4cab82f7186c209ebc04
SSDEEP

1536:TY7p170OyMaWJrgN3QpOdfPQdYeY5bH2o4NUW7YL2ftcA+dYROZ1Id8xuHyhFeA0:ED09MaWLOdfPQdYeW2D+Wci/wfZ6ECo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a533c567f1da264dda985625752b9b

Files

26a533c567f1da264dda985625752b9b
.dll windows:4 windows x86 arch:x86

c1cd430cf38ed2b3bacdd7f8ddb91ef2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
free
malloc

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetErrorMode
LoadLibraryA
GetProcAddress
DeleteCriticalSection
FreeLibrary

Exports

Exports

JgseCreate
JgseDestroy
JgseEncode
JgseEndStream
JgseGetOutput
JgseModifyControl
JgseQuery
JgseQueryComponentTime
JgseQuerySilence
JgseReleaseInfo
JgseRestart
JgseSetStreamOptions
JgseStart
JgseStop

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE