26585baf25179cabda0154a83de73acd[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26585baf25179cabda0154a83de73acd.bin
Size

97KB
MD5

26585baf25179cabda0154a83de73acd
SHA1

695fb8e1bfaddde7ddd73f2e2c38dba0037a4465
SHA256

b21516a8cd181935437cdd513d594b31d1e4fa2addf274b90ea760a1be446be1
SHA512

75e58969b8772566778486064b41d1f8dbc4aec6df426746835960280e7c811958ecdc3578fb09bf161b51c7841909521288aa08133d821fdc2798d8fc819f69
SSDEEP

3072:+Gu+5v+jFHfpIf/hTmPcrRTdv686DtrqLPwJTQDWLqcQ:+GL+jdfpoTYcrRIBDNdQDWLqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26585baf25179cabda0154a83de73acd.bin

Files

26585baf25179cabda0154a83de73acd.bin
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 192KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ