26e430ea68f9b446d78eb7ab12a0c1ae8a750721e70a2006c9515284b410b3f1

Sharing

Copy URL Twitter E-mail

General

Target

26e430ea68f9b446d78eb7ab12a0c1ae8a750721e70a2006c9515284b410b3f1
Size

26KB
MD5

06770a1d8cc35ee59b2fcc2f02e2440d
SHA1

c671c51394864ffe407e3dea772875606deaca97
SHA256

26e430ea68f9b446d78eb7ab12a0c1ae8a750721e70a2006c9515284b410b3f1
SHA512

4e0daa875fbef5120a29664b828f0aaf692511f8019482c2b9d4506aa9db72f2bacac4de79574e5b6311b6e3011c39c8b206cf88b4a26f37887334f59ead4b90
SSDEEP

384:8d2r9TZoCvEnGK38TnnpwIYFIDDs23FjCLgF+s9bcnY5lIlv1G:8dgZzsz3GnfIylV4Rs9tIlv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e430ea68f9b446d78eb7ab12a0c1ae8a750721e70a2006c9515284b410b3f1

Files

26e430ea68f9b446d78eb7ab12a0c1ae8a750721e70a2006c9515284b410b3f1
.exe windows:6 windows x64 arch:x64

7791d9dd2e754facaa23ba2959990eac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\vcpkg\buildtrees\font-util\x64-od-windows-rel\ucs2any.pdb

Imports

vcruntime140

memset
__current_exception_context
__current_exception
__C_specific_handler
strstr
strrchr
strchr
memcpy

api-ms-win-crt-string-l1-1-0

toupper
_strdup
isspace
strncpy
strncmp

api-ms-win-crt-runtime-l1-1-0

__p___argv
strerror
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_initial_narrow_environment
__p___argc
_register_onexit_function
_crt_atexit
terminate
_initialize_narrow_environment
_configure_narrow_argv
exit
_initialize_onexit_table
_set_app_type
_seh_filter_exe
perror
_exit
_cexit
_errno

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fclose
fopen
__p__commode
_set_fmode
__stdio_common_vfprintf
getc

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
realloc
free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtol
atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7791d9dd2e754facaa23ba2959990eac

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 4KB

.pdata Size: 1024B - Virtual size: 672B

.reloc Size: 512B - Virtual size: 48B

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 4KB

.pdata
Size: 1024B - Virtual size: 672B

.reloc
Size: 512B - Virtual size: 48B