26d54b8c12dcb2b9e36619d2ce4e07d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d54b8c12dcb2b9e36619d2ce4e07d6
Size

179KB
MD5

26d54b8c12dcb2b9e36619d2ce4e07d6
SHA1

8a1763b9e803b931002a4b96e8b37272391a2485
SHA256

55ec4f584a3d95b81353cb791a4eec5e0c9326494f5409ab209f0b5893d4ca7f
SHA512

f74eb6457310dc293cdb59e2deb89401355288cfdc96eca28612eb53da8b4bb1c2bc168ac4bb2a5f78967cff7182f01c09b391062381011d04189dc1acae8067
SSDEEP

3072:IYTNWYt5b6vjJUN2ZAhmRWOdAKwwVvLFuFJ2DLpz9OZbn/KGyfEnQR7pK/5wyZfu:IYTJ5b6Ne2GmX+wVjgF0npROIGycnQrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d54b8c12dcb2b9e36619d2ce4e07d6

Files

26d54b8c12dcb2b9e36619d2ce4e07d6
.exe windows:4 windows x86 arch:x86

facad0e9e8fe2c6f0a9cb883c113e9de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
TerminateProcess
TlsSetValue
ExitProcess
GetCommandLineW
TlsGetValue
GetModuleFileNameA
GetCurrentProcess

rpcrt4

I_RpcFreeBuffer
UuidCreate

winmm

timeGetTime

user32

FindWindowA
RedrawWindow
DestroyMenu
ClipCursor
TrackPopupMenuEx
CreatePopupMenu
GetDesktopWindow

msimg32

AlphaBlend
TransparentBlt

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ