26b0d14756c28737bcc388e1e0678e00N[.]exe | Triage

Sharing

General

Target

26b0d14756c28737bcc388e1e0678e00N.exe
Size

24KB
MD5

26b0d14756c28737bcc388e1e0678e00
SHA1

51cc59f544b4f55207a0e29eacde40248838ed09
SHA256

ca6ee564f3a90e453469d46229d81e5d5f8f68fc5ae12f17e14fe9c33fd03a00
SHA512

84063f3459d0709d484c47653c55551c27f416e6165fd2a2de852d69092eb6eb84a54a31fe171ce9cfdcd0edd8cf9248522f685c5f5e66c0247556743984efcd
SSDEEP

192:qytgAeuB2S7FFWlSkABcI+EWL/hTUozHLYDo2SIcIn8/wKUpwZNWj4moLP3TCZ6v:qySFpcI5pTUo7L2FSmnmwKAw2uPTCT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b0d14756c28737bcc388e1e0678e00N.exe

Files

26b0d14756c28737bcc388e1e0678e00N.exe
.exe windows:4 windows x86 arch:x86

72c716384ea0a2091fb58c5c9a356b6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
lstrcatA
CloseHandle
HeapCreate
GetModuleHandleA
HeapAlloc
GetProcessHeap
LoadLibraryA

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ