26be8ccd804bfd942f0692e9ab675c23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26be8ccd804bfd942f0692e9ab675c23
Size

94KB
MD5

26be8ccd804bfd942f0692e9ab675c23
SHA1

87e7bfda50b42d6757ad6bcbd369da0d11dd34b7
SHA256

8f9ae90c4879e84fe834c5c4d02a419f67403f4909083c869aad33aa640538b1
SHA512

3e2751db8f4d4948fa66574411406379a95fc21839d79b08d5a8c3f4a1d1609ef3d8da89faf3b9b6803738b823f6a7561b8c00ecb6d6aecc6eda8d55398dfeee
SSDEEP

1536:fcA1HEUZCj/7ica5ZHpTsmhc+3NM7Jixs5iGTrAXKHzy:F1HEfpcZHpYd+3NM72yiGWMzy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26be8ccd804bfd942f0692e9ab675c23

Files

26be8ccd804bfd942f0692e9ab675c23
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

zhqb16

Sections

CODE
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ