26c4e33b79015a26405848dcd5b9d868 | Triage

Sharing

General

Target

26c4e33b79015a26405848dcd5b9d868
Size

219KB
MD5

26c4e33b79015a26405848dcd5b9d868
SHA1

e0e21fb1f3d10fd089e12a4d5c7d3c75d94a580e
SHA256

528bca764d9437dc7ed387dbe2f6e3130c08260a67a956df866b98fda78f232c
SHA512

7377d52583a70ffa644d56dc666d002d18101d36b20980fcd90cda4ef591ee2b597885da5e3f1b646aaa963a5a0c0002ce0bad78343906a0f12660309e789174
SSDEEP

3072:Plku6A1l3K/uYU5MYbONT1RpjP2Plaz/Pu3o9ON7ACfTt2u4CcpS4ggP:Plt1l3K1U5MYG/pLil3uO5X4npjgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c4e33b79015a26405848dcd5b9d868

Files

26c4e33b79015a26405848dcd5b9d868
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ