26331f5261b3c6e91089e29c99d093b30e82752e41006ed4f249b4f723df80acN | Triage

Sharing

General

Target

26331f5261b3c6e91089e29c99d093b30e82752e41006ed4f249b4f723df80acN
Size

652KB
MD5

a12e4676d0126f46150c60687ec7d9d0
SHA1

d79c8b98072137060644a6ded9f6d7bcc38cab1c
SHA256

26331f5261b3c6e91089e29c99d093b30e82752e41006ed4f249b4f723df80ac
SHA512

2e1173fbca50778c8f9a93f749a21ecc301253c490327bafdee81e77e9abaa0d8e15b9ee40a42c7bc80d3577dfbcd2b1eac68033a185df889bf5f0a905458908
SSDEEP

6144:QRvDTX96CoEruuKyESfmPW2YNgcBoxUENkyL6X3f1hLdhebO7Ck6Rr4iJ3QPXO+Z:QNMMNgcBoxUEy46X3f1hSM6h4ihLvO/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26331f5261b3c6e91089e29c99d093b30e82752e41006ed4f249b4f723df80acN

Files

26331f5261b3c6e91089e29c99d093b30e82752e41006ed4f249b4f723df80acN
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 584KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ