20fd0498a28bfa52859a184eb3eedf5ba7015cdb6417a20458f73d58ea6ce5cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20fd0498a28bfa52859a184eb3eedf5ba7015cdb6417a20458f73d58ea6ce5cb
Size

810KB
MD5

6cda108ad498ce1c8be23aa93f26e001
SHA1

ebf7ec19a9513540bbb51cc51b724527902b9d8b
SHA256

20fd0498a28bfa52859a184eb3eedf5ba7015cdb6417a20458f73d58ea6ce5cb
SHA512

cd979d08814828aab93d1a9fc074681a1ff9281c747e5233499920c64e9abd24475a9debba7c43c00fffd78b788591b2b6b7742454ace197964c4769870d1190
SSDEEP

24576:yjb3RHTjo+kz1oaa8mOnL4NIEi8D2T0bcR042:yxH4Tol1CEiLobcR0

Score

N/A

Malware Config

Signatures

Files

20fd0498a28bfa52859a184eb3eedf5ba7015cdb6417a20458f73d58ea6ce5cb
.exe windows x86

422ff42faafb93f9c785ca851551dca9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OpenMutexW
GetVersion
CreateEventA
lstrcpyW
GetLogicalDrives
GetStringTypeA
GetModuleHandleA
GetLogicalDrives
SetCurrentDirectoryW
GetFileAttributesA
GetLogicalDrives
GetStdHandle
VirtualProtect
GetLogicalDriveStringsW
LoadLibraryW
GetLogicalDrives

scrrun

DoOpenPipeStream
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ