26fac8b6530c534a17092c17e902e1b52c9a2ea182d2f50ffb59679b1c8ae71e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26fac8b6530c534a17092c17e902e1b52c9a2ea182d2f50ffb59679b1c8ae71e
Size

63KB
MD5

91842c91659edf0bc77331d621cc2a07
SHA1

98a6b1d8c0e45abd54e333f7ae69ee738e10f21e
SHA256

26fac8b6530c534a17092c17e902e1b52c9a2ea182d2f50ffb59679b1c8ae71e
SHA512

eb599837a3231fd13308f8360a6b92251ba69dbbdb1d2e8ad739f6c81191e7425a4d1eed2ffbda9374315c155aa3f5df8b937a59109bab54236799687f584447
SSDEEP

1536:hWX6wIayRM2Qp6xD22wm+mUW5J0baCqC7W8aXvlr4K7HMi9:YXyopp6l2bqZJ0fqIWzOK7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26fac8b6530c534a17092c17e902e1b52c9a2ea182d2f50ffb59679b1c8ae71e

Files

26fac8b6530c534a17092c17e902e1b52c9a2ea182d2f50ffb59679b1c8ae71e
.exe windows:4 windows x86 arch:x86

0def290d15b9cc0ae5aeebd6a30ce18c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesExW
GetDefaultCommConfigA
FindFirstVolumeW
GetNumaNodeNumberFromHandle
FreeUserPhysicalPages
RegOpenUserClassesRoot
LocalFileTimeToFileTime
SetConsoleCursorMode
FindFirstVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE