26cfed991d474317dc9ea7d979dcf008 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26cfed991d474317dc9ea7d979dcf008
Size

814KB
MD5

26cfed991d474317dc9ea7d979dcf008
SHA1

659ed24d490acc607bdc3db223fb0883479e0d0d
SHA256

b8b9ffd584cd835e8cc8f5059d0b923a00429a9a3394f5cd5c01f52fb1ba7249
SHA512

98b8a7f3c4190b22578f7cfc83f115165e3ef013247e62c70187c675e09db63bcedc78a78fd98cf18fab5df26a998b91b8d5a2ecf1d481e4336abd2ed9fb6a06
SSDEEP

24576:1IU+IH2ptWqMzimZVIeFP7hNEdxczLgYVwJfmt:rot1M+6VIednY5Jut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26cfed991d474317dc9ea7d979dcf008

Files

26cfed991d474317dc9ea7d979dcf008
.exe windows:4 windows x86 arch:x86

dae4ea90dc1d52fd382182a81b13dc6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GlobalMemoryStatus
QueryDosDeviceA
SetFilePointer
GetProcAddress
SetSystemPowerState
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ