26e2c2a66b4032599a7dd2e1d0104ebc

Sharing

Copy URL Twitter E-mail

General

Target

26e2c2a66b4032599a7dd2e1d0104ebc
Size

216KB
MD5

26e2c2a66b4032599a7dd2e1d0104ebc
SHA1

4ba407a135a33d5c254dffbb03d804781ae54c7d
SHA256

cb780551a1850864f0ef7f49945fd556659f5624c39e53ee858a3b117a172e96
SHA512

f47d29b4e1de6fab3e63e7382d0ef16491a176e5278480e2cd5f60732631ae46e4afe89a52bae40c1c49926ae9876557b9ac657600834c684920e202ce5abbb1
SSDEEP

3072:2nQkSO7sPHS7+zENyikP8VRU7yZcy+4y+9hwL2pNF7PPW113YlMWpqcPSYlZpbNz:qp7GA+wNlVRUu0yK0DLU1s/pqoSA1sV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e2c2a66b4032599a7dd2e1d0104ebc

Files

26e2c2a66b4032599a7dd2e1d0104ebc
.exe windows:4 windows x86 arch:x86

e88ba0512c5cc14fcbaf0c216a1661f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteValueA
RegLoadKeyA

user32

MapWindowPoints
RedrawWindow
SendMessageA
ScrollWindow
PeekMessageA
RegisterWindowMessageA
LoadCursorA
LoadKeyboardLayoutA
OemToCharA
OpenClipboard
LoadBitmapA
PtInRect
RemoveMenu
OffsetRect
RegisterClassA
ScreenToClient
ReleaseDC
PeekMessageW
ReleaseCapture
RemovePropA
RegisterClipboardFormatA
SendMessageW
LoadStringA
MessageBoxA
MapVirtualKeyA
SetActiveWindow
PostQuitMessage
MessageBeep
LoadIconA
PostMessageA

gdi32

CreatePenIndirect
SetTextColor
GetBitmapBits
GetCurrentPositionEx
CreateFontIndirectA
CreatePalette
CreateDIBitmap

ole32

CoReleaseMarshalData
OleCreateStaticFromData

oleaut32

SysStringLen
RegisterTypeLib
SafeArrayCreate
VariantCopyInd
SafeArrayGetUBound

kernel32

LocalReAlloc
lstrcatA
lstrcmpA
lstrlenA
LoadLibraryA
GetCommandLineA
LocalAlloc
MoveFileExA
lstrcpynA
IsBadReadPtr
VirtualFree
GetLastError
ExitThread
lstrcmpiA
VirtualAlloc
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
WriteFile
LocalFree
SizeofResource
WaitForSingleObject
HeapDestroy
ExitProcess
lstrcpyA
GetProcAddress
VirtualQuery
MoveFileA
MulDiv
LoadLibraryExA

shlwapi

SHStrDupA
PathGetCharTypeA
PathIsContentTypeA
SHGetValueA
SHSetValueA
PathFileExistsA

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetFolderPathA

comctl32

ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_Destroy
ImageList_Draw
ImageList_Write
ImageList_Create
ImageList_DrawEx
ImageList_Remove

msvcrt

strlen
sqrt
tolower
wcsncmp
_acmdln
wcstol
malloc
time

version

GetFileVersionInfoA
VerFindFileA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e88ba0512c5cc14fcbaf0c216a1661f6

Headers

File Characteristics

Imports

advapi32

user32

gdi32

ole32

oleaut32

kernel32

shlwapi

shell32

comctl32

msvcrt

version

Sections

.text Size: 74KB - Virtual size: 73KB

.data Size: 1KB - Virtual size: 1KB

.rsrc9 Size: 1024B - Virtual size: 654B

.rsrc2 Size: 2KB - Virtual size: 1KB

.rsrc8 Size: 1KB - Virtual size: 1KB

.rsrc4 Size: 4KB - Virtual size: 4KB

.rsrc0 Size: 129KB - Virtual size: 128KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 74KB - Virtual size: 73KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc9
Size: 1024B - Virtual size: 654B

.rsrc2
Size: 2KB - Virtual size: 1KB

.rsrc8
Size: 1KB - Virtual size: 1KB

.rsrc4
Size: 4KB - Virtual size: 4KB

.rsrc0
Size: 129KB - Virtual size: 128KB

.rsrc
Size: 1024B - Virtual size: 976B