26cef69045eab7d0b37f157baf1ab090 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26cef69045eab7d0b37f157baf1ab090
Size

788KB
MD5

26cef69045eab7d0b37f157baf1ab090
SHA1

5f6be2d0b0367989c6f9654ce80f9e0ad1aff14c
SHA256

4fe801ea3abaad21cc856073ee8fb966f71039dd1a7aa84129cee2bec84bbd8e
SHA512

1d4b8c500ec50f4fdedab6e21882fb34133e72239fb5100000d80a1447ec06b212daa10a275b253c897da2bafc0a13f22bd992e46500572fd93ab3b6d839eefe
SSDEEP

24576:p8ZQAwkU+16dtP/iZeeViY8G6FscDmItzzW:pH0P+hY8xFswW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26cef69045eab7d0b37f157baf1ab090

Files

26cef69045eab7d0b37f157baf1ab090
.exe windows:0 windows x86 arch:x86

4bda570ce112adc211f3bd7fa6b82f33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect

msvcrt

malloc

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW0
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW1
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW2
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 6B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ