26c34af1a55a1b163644e8f186791746

Sharing

Copy URL Twitter E-mail

General

Target

26c34af1a55a1b163644e8f186791746
Size

25KB
MD5

26c34af1a55a1b163644e8f186791746
SHA1

01e7f5bfbec573fad692cb1643cdcd083dc8d95c
SHA256

ddb7faa8089e22b0580d6c7e3be845c9a30789d64d2ac4dd3722f98c395e3cac
SHA512

32393c1dca57c962b05f55d5fce48bea17eade59fb7836ed5d784d28ae555ce238c10251af1910f260ea43a0c2797b3f19f343d99f44900eb839187eb622341b
SSDEEP

384:WE50ffHeb7Wz2F80Ho03PilSNaKUMTJxOY6VLE1zK4sw9bNv7gBbAXk:4e+2m0Ho06EavkHOvLEhKp2Njwbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c34af1a55a1b163644e8f186791746

Files

26c34af1a55a1b163644e8f186791746
.exe windows:4 windows x86 arch:x86

42ba670d7c2efda8fb39a8c529200991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
LoadResource
SizeofResource
CreateFileMappingA
GetThreadContext
ReadProcessMemory
VirtualProtectEx
CreateProcessA
VirtualAllocEx
TerminateProcess
VirtualQueryEx
MapViewOfFile
GetProcAddress
LockResource
CreateFileA
VirtualAlloc
WriteProcessMemory
GetModuleHandleA
SetThreadContext
ResumeThread
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

msvcp80

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??0strstreambuf@std@@QAE@PADH0@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??1strstreambuf@std@@UAE@XZ

msvcr80

__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_amsg_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
fopen
printf
fwrite
_open_osfhandle
ftell
fseek
fread
fclose
_fdopen
__CxxFrameHandler3
memset
memcpy

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42ba670d7c2efda8fb39a8c529200991

Headers

File Characteristics

Imports

kernel32

msvcp80

msvcr80

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 11KB - Virtual size: 10KB