26ffb39d943ce3191ac12b1b0f157a4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ffb39d943ce3191ac12b1b0f157a4c
Size

587KB
MD5

26ffb39d943ce3191ac12b1b0f157a4c
SHA1

52f840a9b588f0032d42ab9b4c6d04700bd52daa
SHA256

7bfbdf342fbb4f096ac425e8f79233fc29416a3d360da448751c024c14704c08
SHA512

40c2237239def9484523b673ac823417cecbdf0a2e47833fc06ab64356406d7f35b04d52d451469e8808ec054fd9ebd45d1c246b9731419a79658dc7b32c2b92
SSDEEP

12288:gaONqCVR7HVT6x8rA2KunkRQa4Q5ShFU489Qzd8u97t4aw:gzqQ71uhinkH4WSHVz+uVt4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26ffb39d943ce3191ac12b1b0f157a4c

Files

26ffb39d943ce3191ac12b1b0f157a4c
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 581KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ