59c26fc6ae026e2be99116344526b8d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59c26fc6ae026e2be99116344526b8d3
Size

26KB
MD5

59c26fc6ae026e2be99116344526b8d3
SHA1

0c29a099df77d0da2a5f43fe6caf6eee7f1a17c4
SHA256

4aea6d512027115c33ec8e0384953950314c85d01f9a1583aef98c66a5be94f2
SHA512

f7306999b6e4db555d8b4c9b257734a33fa676d6b17fde993e5277dceaf2b5333b567a7f051c787f2fd793840e4b4a5b809f69eb9d2f8b83463335746627e83a
SSDEEP

384:niLNydwMlIu8c/ZsgrtOL5Rrjv6ufzVyrBYfiVwTkQgP:niL0dl+GegrevIrBiiVhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59c26fc6ae026e2be99116344526b8d3

Files

59c26fc6ae026e2be99116344526b8d3
.exe windows:4 windows x86 arch:x86

bbeec381ef4fead399c53c0750caa1d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetConsoleMode
HeapCreate
CreateMutexA
GlobalUnlock
GetStdHandle
SetLastError
TerminateThread
TlsGetValue
lstrlenW
GetModuleHandleA
Sleep
GetCurrentThreadId
CloseHandle
FindResourceA
SetEnvironmentVariableA
PulseEvent
LocalFree
CreateFileA
ReleaseMutex

user32

CallWindowProcA
DrawMenuBar
DrawEdge
CopyRect
SetFocus
FillRect
GetDC
CheckRadioButton
GetIconInfo
DispatchMessageA
IsWindow
GetDlgItem
GetClipCursor

apphelp

SdbCloseDatabase
SdbGetDatabaseID
SdbFindFirstTag
ApphelpCheckIME
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE