26d8fdf2d9637065b8745818f3f488ad | Triage

Sharing

General

Target

26d8fdf2d9637065b8745818f3f488ad
Size

73KB
MD5

26d8fdf2d9637065b8745818f3f488ad
SHA1

e4eff9fcb0f1c4e52b3b30a2a65c3e6879aa9eb6
SHA256

c25126ebfbc9992f24018153f6d9572d4dc4a122aa8c32c604e65cdebe6f1c28
SHA512

529338d516d465c18bfde98a997c7b18a115a987fb945074f917c3cbb9de2570bd1cb8fc592c9eb7615ea8bbb5f37a1dc3dc0cda86f0ccf84034bc3149f7152e
SSDEEP

1536:UIBogw8THhRaAi0V6BtpZLJSm0wqvIKCGHVUo:Bo1KHhRaApAhTeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d8fdf2d9637065b8745818f3f488ad

Files

26d8fdf2d9637065b8745818f3f488ad
.dll windows:4 windows x86 arch:x86

1587be985ecce39d6a4803ecdeca415b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetStartupInfoA
GetUserDefaultLCID
GetVersionExA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
LocalFree
MultiByteToWideChar
RtlUnwind
SearchPathA
SetLastError
SetUnhandledExceptionFilter
WaitForMultipleObjects
lstrcatA
lstrcmpiA
lstrcpyA

user32

WindowFromPoint
TranslateAcceleratorA
PostQuitMessage
GetUpdateRgn
GetDlgCtrlID
GetCursorPos
EmptyClipboard
CreateDialogParamA

ole32

CoCreateGuid
CoCreateInstance
StringFromGUID2
CLSIDFromString
CoTaskMemFree

advapi32

LsaClearAuditLog
SetNamedSecurityInfoExW
LsaQueryDomainInformationPolicy
GetTrusteeFormA

olepro32

OleLoadPicture

Sections

.text
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ