c26c18bd4ea5ca91d0ab53d54ef344fe | Triage

Sharing

General

Target

c26c18bd4ea5ca91d0ab53d54ef344fe
Size

14KB
MD5

c26c18bd4ea5ca91d0ab53d54ef344fe
SHA1

4dec653f150d3abee178091b095b3c53e96afe1c
SHA256

263b6359055a8a55c511550c75f80dd541bb73db24665fa282f1a0d55c4917b0
SHA512

c9b032915ac11bf121ca608938ff2d8e56b17d5e0dbd70b64d44c29861ef298a8d0c8a60f0272ebdbe48352d6b2d9d9e9659c4be49a78be65d4ade812480f331
SSDEEP

192:YyyHqLHpuVJ4aLSzj2VvjDzb/jgqPei442WGpSOPv0nX4fP1rWQjpMXvX:YBGH0oaLNvHP/jgq1446pMofNpFMfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c26c18bd4ea5ca91d0ab53d54ef344fe

Files

c26c18bd4ea5ca91d0ab53d54ef344fe
.dll windows:4 windows x86 arch:x86

39c1b101ea11472ac3734ed8f2e82436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

KeWaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ