26cac671e215d88b5070af7d94200588d2b7c414a6e8debf7370b993fcfffb23 | Triage

Sharing

General

Target

26cac671e215d88b5070af7d94200588d2b7c414a6e8debf7370b993fcfffb23
Size

342KB
MD5

ff28c8c7a68cca3b06e78e5397d66721
SHA1

bbb8eef4bbc0a8296963039682cbc4e3be3364f8
SHA256

26cac671e215d88b5070af7d94200588d2b7c414a6e8debf7370b993fcfffb23
SHA512

5d0fdb3858abccf2b54e642e17cc1f504cd70d2028cceede82cf55399671e550850dd5bfaf91fc794fa441a7d6a6e63ec0d51e68122cb6f3e221e16f81451bee
SSDEEP

6144:r7bqnqgeK6XkQA+wGVSZRujeFUwdaZ5weTqKKv6:rnqqgeK6xp3gZMjeBTKAv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
26cac671e215d88b5070af7d94200588d2b7c414a6e8debf7370b993fcfffb23

Files

26cac671e215d88b5070af7d94200588d2b7c414a6e8debf7370b993fcfffb23
.dll windows:6 windows x64 arch:x64

75efe33d5ebf38609d4c0590befce71e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
TlsGetValue
CreateFileA

Exports

Exports

DllServerResume
DllServerSuspend
DllUnregisterServer
RegisterDevice
RemoveDevice
UnregisterDevice
vtscore

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ