26f69c938db08aa0347e50a47a713ac4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f69c938db08aa0347e50a47a713ac4
Size

242KB
MD5

26f69c938db08aa0347e50a47a713ac4
SHA1

749b4b212b94dc084d5ab02dba474a99017ddeea
SHA256

c545ab3640d0329e65b1c80e0b0836b5bea6bea0521d556c7c90e6a6e79513ae
SHA512

5cba3964b55ed69e2b0d3a644b554c36ce221f2fbacf94bca5da3302fd9b0711a3220d03857ddeef6692a108e76905255f5a7fb9625a0b8022832aa49770326f
SSDEEP

6144:OiHSod0a06as4oo+rcX4x3TSxMmjqYnjZlW3H:OiHj4ooP4xD6vlW3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f69c938db08aa0347e50a47a713ac4

Files

26f69c938db08aa0347e50a47a713ac4
.exe windows:4 windows x86 arch:x86

db7d29b96bbb021f77f91ee453b40b30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
GetProcAddress
VirtualFree
Heap32First
Heap32Next
Sleep
VirtualAlloc
Heap32ListFirst

user32

GetInputState
SendMessageA

wininet

InternetCloseHandle

ole32

CoInitialize
CoInitializeEx

advapi32

RegQueryValueExA
RegQueryValueA

Sections

MZvFgUsz
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BmYSCjxg
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pndcOiRR
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CyJerXxY
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE