26a98408fc2053c13b2494d4a0c3d435 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a98408fc2053c13b2494d4a0c3d435
Size

1.1MB
MD5

26a98408fc2053c13b2494d4a0c3d435
SHA1

28a761a1cb6394d9c29809cec29ff4f2bc02e38a
SHA256

411ca654c829e8f116d59507dc0afa4164c4f518592dc52bc75120986dbacb1b
SHA512

82db716c97f3d21cafc9594dc6a008ea7de6a3a401d0394bc39c54b717ea63b307a372db45de268c5ebdcc5462862f3b992d99d41fa6d104a2b9725d5559b4f8
SSDEEP

24576:FFVFtavjMlYMDRJ66rZnx8uH6t7kVxgvm9KvSed2UFnU+F5j4O/HBpjot:1uvolYyM7Qgvm9YsU/XtvXjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a98408fc2053c13b2494d4a0c3d435

Files

26a98408fc2053c13b2494d4a0c3d435
.exe windows:4 windows x86 arch:x86

427a13b6b0ea99d219b27dd2547faa56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

winmm

mciSendCommandA

Sections

CODE
Size: 1.0MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE