f26d6bee7299c4f861cd5d99e6eb6850N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f26d6bee7299c4f861cd5d99e6eb6850N
Size

317KB
MD5

f26d6bee7299c4f861cd5d99e6eb6850
SHA1

b0225b2027586cfaae50f4e7aeed711646a70b65
SHA256

49bcbd571d65d4db02ae9c1b507c1ccd14704be4a1afe100a56c314aa16ba273
SHA512

f0346b4611a387af3f42627abd27d01c976d724412035c53f0abc2d2f6f10b42ba4259f20771d7a0d921d5a6c0d1f8a14bd7631d09e85e997964d4b152577be3
SSDEEP

6144:QffzHxuuQagkTj9hBhf+q/R+eDDyVMKOKhWKO9POgVxiarcEqh9D1m:GrHx19g2jfBNWrVtOIWHPR+Eco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f26d6bee7299c4f861cd5d99e6eb6850N

Files

f26d6bee7299c4f861cd5d99e6eb6850N
.exe windows:4 windows x86 arch:x86

ed7ec585f02f1d77a1596026a8c27e45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
FreeConsole
LoadLibraryExA
EnterCriticalSection
DeleteAtom
GlobalUnlock
CloseHandle
GetStdHandle
LockResource
GetTimeFormatA
SizeofResource
WriteProfileStringA
GlobalAddAtomA
VirtualProtect
GetLastError
HeapCreate
LocalFree
GlobalFree
RaiseException
GlobalAddAtomA
lstrcpyA

user32

GetDC
GetParent
GetForegroundWindow
DrawEdge
BeginPaint
CloseWindow
GetWindowTextLengthA
GetFocus
ReleaseDC
GetActiveWindow
GetWindow
ValidateRect
EndPaint
GetClassNameA
ShowWindow
GetClassInfoExA
GetWindowTextA
AlignRects
IsIconic

mprapi

MprAdminUserGetInfo
MprAdminUserClose
MprAdminUserOpen
MprAdminUserRead
MprAdminUserWrite

mapi32

MAPILogonEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ