26c07eedaf787bc22563b56cdc69a439

General

Target

26c07eedaf787bc22563b56cdc69a439
Size

88KB
MD5

26c07eedaf787bc22563b56cdc69a439
SHA1

19343cd98f652b803b8761bcd23ebccadf244c01
SHA256

0e9f40aa48cf4da1d49b692721b0da6afa3c944a74c1edbc69d30b1611ebd01c
SHA512

d6ac85bd387851d422135d0344cb65b1aaad9f9ff2d2707a0e9cefb1a6c2136da6e19b49d8abcc3a2e8f20bc97cea5e9da542f54bdd4359a9e8ed4bdd334686b
SSDEEP

1536:ysdNnW9BeJm3PkVK1eEpIVeh+o8C8aex7KaHbrl903uvy8uiAdA:y73PeU+Xea7p903uvyPdA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c07eedaf787bc22563b56cdc69a439

Files

26c07eedaf787bc22563b56cdc69a439
.exe windows:4 windows x86 arch:x86

80419bf3448fe7b59998256d38d48b43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDiskFreeSpaceA
SHFileOperationA
SHGetFileInfoA

msvcrt

_acmdln
malloc
sprintf
memcpy
mbstowcs
memmove
rand
clock
tolower

comdlg32

ChooseColorA
FindTextA

advapi32

RegEnumValueA
RegLoadKeyA

kernel32

LoadLibraryExA
Sleep
GetOEMCP
GetLastError
GetStdHandle
GetACP
CreateFileA
CreateEventA
GetFileType
VirtualAllocEx
LocalAlloc
GetCommandLineA
GetSystemDefaultLangID
GetDateFormatA
ExitProcess
SetEvent

shlwapi

PathIsDirectoryA
SHQueryValueExA
PathGetCharTypeA
PathIsContentTypeA
SHEnumValueA
SHQueryInfoKeyA
SHStrDupA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA

Sections

BSS
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80419bf3448fe7b59998256d38d48b43

Headers

File Characteristics

Imports

shell32

msvcrt

comdlg32

advapi32

kernel32

shlwapi

Sections

BSS Size: 13KB - Virtual size: 12KB

.rdata Size: 64KB - Virtual size: 64KB

.edata Size: 5KB - Virtual size: 5KB

DATA Size: 1KB - Virtual size: 13KB

.init Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 571B

BSS
Size: 13KB - Virtual size: 12KB

.rdata
Size: 64KB - Virtual size: 64KB

.edata
Size: 5KB - Virtual size: 5KB

DATA
Size: 1KB - Virtual size: 13KB

.init
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 571B