26e8b3bd9cdef731ed508b1aeb23c38f | Triage

Sharing

General

Target

26e8b3bd9cdef731ed508b1aeb23c38f
Size

2.2MB
MD5

26e8b3bd9cdef731ed508b1aeb23c38f
SHA1

46f24b566f4258ba9e8a0b4bd0afc6ae4e3fce6e
SHA256

ecb5f80a0014b3ccff95a8351a41ba4e713dd35587501ac27716a54f340e9166
SHA512

8fc7a53f4c86b55407563b0ad24c23f9dc7818416b6802cd91b1b2219f5eca902d2f802902b90acd6eea59348e62e0d7625d2e56cea29bf95b167865f910529d
SSDEEP

49152:l4oE9uKz3+ZIIvve0eC8lB/LSwVM7ZjyAMyxzBtNUC/aWsdPg:l4owpz3+ZIIvm0h8j/LuPraWsdPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Office 2010 Toolkit & EZ-Activator 2.0 Beta 3/Office 2010 Toolkit.exe

Files

26e8b3bd9cdef731ed508b1aeb23c38f
.rar
Office 2010 Toolkit & EZ-Activator 2.0 Beta 3/Office 2010 Toolkit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.9MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ