26f92c2d60b4eb90d4f2a00e02346b28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f92c2d60b4eb90d4f2a00e02346b28
Size

18KB
MD5

26f92c2d60b4eb90d4f2a00e02346b28
SHA1

538533dc5ac44b53678396eac559c2cfff1658f0
SHA256

c26ea94baf1c7718bd3f3eca7772798030c6e99313dc9c51ea4d2c204235c219
SHA512

ff0c8e591dae80acaff6d886df999f4be489c9fe2396eb4bc891f1bcd508a8fe88316648455def8d00fa4ca31722301e70c532153cad60e9705a8218c79b01fc
SSDEEP

384:mCSSYvFE6tJwdikMs2UBRSgKtX83UAUf8i6N1WvJ+HwRJ:kvFEOJwQbs2qggNU5EFN1EJj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f92c2d60b4eb90d4f2a00e02346b28

Files

26f92c2d60b4eb90d4f2a00e02346b28
.exe windows:4 windows x86 arch:x86

cd7541eeda5d25203b46ba84ea313a07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

WmiExecuteMethodW
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExA
RegDeleteKeyW
RegQueryValueExA

kernel32

TerminateProcess
GetStartupInfoA
GetModuleHandleA
GetLastError
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
GetProcAddress
GetCurrentProcess
GetCurrentThreadId

Sections

.textbss
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ