b26ecc8bfb58fcb6e0cf523542b486ea6303e94819f56ec0b66b4a83d197e32c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b26ecc8bfb58fcb6e0cf523542b486ea6303e94819f56ec0b66b4a83d197e32c
Size

83KB
MD5

904c231e17849eb364aa8cc41bea5177
SHA1

12ac59cb1f7209523ea2d3d8acd0907129972cc0
SHA256

b26ecc8bfb58fcb6e0cf523542b486ea6303e94819f56ec0b66b4a83d197e32c
SHA512

c3f0eeb34b59deed48ae968f6061e63de4b11eec9126e02d9521c7c4e91df02755246f299401396662737b3c67f0b705ab325def2d56b47552f697f994ca47c5
SSDEEP

1536:uG1uYrALtlhz/4E2DncKCHi6m9JrLUTzWWr9vpjVrs2ryrd1vUQuq14BlLy:uGUY+tlhkprcTQreXFHs2qwBlLy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b26ecc8bfb58fcb6e0cf523542b486ea6303e94819f56ec0b66b4a83d197e32c

Files

b26ecc8bfb58fcb6e0cf523542b486ea6303e94819f56ec0b66b4a83d197e32c
.exe windows:4 windows x86 arch:x86

3129fca4f674760cec2ed42a2536a420

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvOpenRegEntry
EnumSystemLocalesW
GetConsoleCursorMode
IsBadHugeWritePtr
GetModuleFileNameA
SetLastConsoleEventActive
FatalAppExitA
GetNamedPipeClientComputerNameA
DosPathToSessionPathW
TermsrvOpenRegEntry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE