26b2afe0e6f2e30f2ccda8692069a922 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b2afe0e6f2e30f2ccda8692069a922
Size

25KB
MD5

26b2afe0e6f2e30f2ccda8692069a922
SHA1

506deb80add70fe4faade4e55ceaf54eec31a70d
SHA256

d882a2995df068b9a9722292b37bf1f0b0591d837773f3c5bc3b2798d5eef3b1
SHA512

f4cc71e2815f50e583736a9b6f3785382a5188abee3cf588196f631053a477a0f37ce5d3c4ebe2c75845de9b26a437f4f362453e740e9f9de2bd7833bde0a6df
SSDEEP

768:enHKmM0qauedykJ7BFjKcFNkZmGKAe7D:eqmMyl7BFGSsZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b2afe0e6f2e30f2ccda8692069a922

Files

26b2afe0e6f2e30f2ccda8692069a922
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 21KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE