26410b9d5dcfb617aca509cfb4f06a9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26410b9d5dcfb617aca509cfb4f06a9e
Size

292KB
MD5

26410b9d5dcfb617aca509cfb4f06a9e
SHA1

d4b104ee16de4ecbaf4b5b1328aa5646a22031b7
SHA256

7158c349b6ef38abb108c18e075a2e8c85cbd9bae7a119029237d35fe45a70ba
SHA512

9199c4b70c09c1cf9b0ae302374834ac53d0b27eacfe31cb5dcd6b19a700fa1682d6f3fb0dd82d7cdffd025dc240196bd2d0d1f947c20f0f1f1efd5db6dcc23e
SSDEEP

6144:AiNaBJJ/f52PbJcAPNHvdv8wzUuFaUXYUKxh9fNbK8eg:A+aX5f8P9cu9+wzUyxYl31w8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26410b9d5dcfb617aca509cfb4f06a9e

Files

26410b9d5dcfb617aca509cfb4f06a9e
.exe windows:4 windows x86 arch:x86

cac394a0443944ba36e27ed957f6aa26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
LoadLibraryA
lstrlenA
IsBadReadPtr
IsBadHugeReadPtr
GetModuleHandleA
GetProcAddress
ExitThread
GetModuleHandleW
GetLastError
VirtualAllocEx
GetCommandLineA
GetCommandLineW
ExitProcess

Sections

.text
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 415B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ