026cf1ab005acb3bfd97483e2b98c39811ac939734f7471fac96bf917c408dd1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026cf1ab005acb3bfd97483e2b98c39811ac939734f7471fac96bf917c408dd1.exe
Size

1.7MB
MD5

c118ca1c132920af47a48c9ccdb1b382
SHA1

377fa5c2ae0968e0475ce5a947f2819258bb44cf
SHA256

026cf1ab005acb3bfd97483e2b98c39811ac939734f7471fac96bf917c408dd1
SHA512

4340767643a60ff491a4273e0c04b2f309a757fb76a0841a0555e7b5c6bb8e795b2fc10ac5d4560b576b2e00131150feb349001bb9b67dd2c8c22571ee333106
SSDEEP

49152:13iAY0CxvIV6bYM4Zm5OQsnv0twviJHe0QUJVL+Q:LY0PV60MIJNvCwv2+ox+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026cf1ab005acb3bfd97483e2b98c39811ac939734f7471fac96bf917c408dd1.exe

Files

026cf1ab005acb3bfd97483e2b98c39811ac939734f7471fac96bf917c408dd1.exe
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oqshljdk
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qomohuis
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE