20eb8808905864dc04b90457f734eb3946ad2d6824d8f7f48556cef7e0063600 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20eb8808905864dc04b90457f734eb3946ad2d6824d8f7f48556cef7e0063600
Size

76KB
MD5

b868e8aad36a1d647419241487d2df0c
SHA1

46e692117be5b18be1c3d0d45890a2bb434ab635
SHA256

20eb8808905864dc04b90457f734eb3946ad2d6824d8f7f48556cef7e0063600
SHA512

cd777b870956918f36b3a5fa62d1bb51ab8062a85c919f727398826581097f865984604158afaaa3d6574f54e00ae7d60638188ddbfe2ebf93bfab7f06074655
SSDEEP

1536:CeBVSyYFZsMkhMKW8zSYN+m30nKaZM9ImjEErxTWDTMqhGKYIZTET8x:CGQkhMKn2FvqZjBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

20eb8808905864dc04b90457f734eb3946ad2d6824d8f7f48556cef7e0063600
.exe windows x86

421aad3d86db0c1748c510a6423a1ae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadIOPendingFlag
VerifyVersionInfoA
EnumDateFormatsW
SetThreadPriorityBoost
TransactNamedPipe
FindVolumeMountPointClose
RtlUnwind
DisableThreadLibraryCalls
SetDllDirectoryA
FreeLibrary

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE