26d11e33475a3723d598f62b42a1ee34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d11e33475a3723d598f62b42a1ee34
Size

1.0MB
MD5

26d11e33475a3723d598f62b42a1ee34
SHA1

0d9a76d0d019622276a1d9d878f7ba35bc0650d3
SHA256

7de8321aaa56f65ef5c054cc29dd46492cb241719bc90d87719951a8cf404ca8
SHA512

e4e26448177ced6f9cafa66068af10ebf7e9cd236f75af034de3d670bb5b9d66d1292e52941937ed90cbfa49d1e3c37867c59d2bcd63c12e012ed116bcc0d597
SSDEEP

24576:7jl2qMCg2jPHvLAje9VD9FsJzMh25I0NOKjp:99MCDHUyDDbeMh25IMOKjp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d11e33475a3723d598f62b42a1ee34

Files

26d11e33475a3723d598f62b42a1ee34
.exe windows:4 windows x86 arch:x86

2ae15a201e0d04ce273e263f2b4a44b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GlobalFree
lstrcpyA
GetFileSize
Sleep
LocalFree
GlobalAlloc
CloseHandle
GetTickCount

msvcrt

__CxxFrameHandler
exit
__set_app_type
rand
_exit
_acmdln
_except_handler3
__p__commode
wcstoul
__getmainargs
__setusermatherr
_c_exit

gdi32

GetPixel
GetStockObject
DeleteObject
SetROP2
GetTextExtentPoint32A
GetObjectA
CreateCompatibleDC
SetBkMode
SelectObject
GetTextColor
MoveToEx
GetBkColor
LineTo
GetDeviceCaps
SetPixel
CreateSolidBrush
ExtTextOutA
GetTextMetricsA
BitBlt
CreateFontIndirectA
PatBlt

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1019KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ