c26d4aac15931946d5f36cc4b43d7151 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c26d4aac15931946d5f36cc4b43d7151
Size

34KB
MD5

c26d4aac15931946d5f36cc4b43d7151
SHA1

2f619b03714c0230be0cfcf2694029687c9c3718
SHA256

e84cee372c966e1b8215731547ffc10df37e399f0c95b432d0a74e40d4b7cff6
SHA512

f78b3136770f23cb6f868b7172f6cb884770c122ebe9b760e21961e8b8a2290f6a8de9254bb99ac4a63cab33853685fb561bbb25af572ca40409bc78618afb33
SSDEEP

768:8FO2A7dQ0GE3rH9zWlhCGxOwezeFc7oDRzAqrfxcBzyhTgmU5hfYK:85ARvbE9eUL9s6pNhTgHbgK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c26d4aac15931946d5f36cc4b43d7151

Files

c26d4aac15931946d5f36cc4b43d7151
.exe windows:4 windows x86 arch:x86

1d43cd5e399f31c49a6f934c29809b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

.text
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE