26096b61ad1d1388e0722f8e6aae9761

General

Target

26096b61ad1d1388e0722f8e6aae9761
Size

186KB
MD5

26096b61ad1d1388e0722f8e6aae9761
SHA1

e9f579f8531e8c4a1e7a96aa82d129e30940458d
SHA256

4d59cd30364497dc4b77b6f16376d631d4b2e9f996b7572c458603955230e130
SHA512

f4d1d7d1946d7c6441373bbd51a097afbf51a585f9d0976e32e713600290b2c4e3afb2c71ac88c05677eb1964fc39faf32228220eebe70427c5e5b963990b994
SSDEEP

3072:1xN/CqBqEuZ//WM8B2iAY5NQj7shmQ4ig2UgYhwfDXJDAA8TyfEMl1D7SccS:3N/ANZ/+jiKQj7shmQKGLCAIKJlU9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26096b61ad1d1388e0722f8e6aae9761

Files

26096b61ad1d1388e0722f8e6aae9761
.exe windows:5 windows x86 arch:x86

93f4ea067f02032cc09ad2cd585fedad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsValidCodePage
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP

user32

GetSubMenu
ModifyMenuW
LoadMenuW
GetMenuInfo
HiliteMenuItem
TrackPopupMenu

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93f4ea067f02032cc09ad2cd585fedad

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 143KB - Virtual size: 146KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 143KB - Virtual size: 146KB

.rsrc
Size: 512B - Virtual size: 436B