20753a943e9ee1671ab7081235f96b50c75ec6c7cf0888eb71db6637d4c1eb3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20753a943e9ee1671ab7081235f96b50c75ec6c7cf0888eb71db6637d4c1eb3c
Size

13KB
MD5

62a67f281f3c18a39d9c18f20ea8214b
SHA1

a65220af95b8fd497aa9436341f8ee1041561201
SHA256

20753a943e9ee1671ab7081235f96b50c75ec6c7cf0888eb71db6637d4c1eb3c
SHA512

13f7d74d31cefaa02826dee2c903d4e60475117702f8d044556e496f8c19c52495e0a62f2c8785abd901e87966fa1908e905911bfb0c11fdba8c1590fda9dadd
SSDEEP

96:KB5XgAH1gt80j3UKtDdb9OcNQQy3caShX5QS0Oc9cyDYPzCRlPPgioLcym9cT6:mNn+80LJyr2X5QtY7kPIiowyKO6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20753a943e9ee1671ab7081235f96b50c75ec6c7cf0888eb71db6637d4c1eb3c

Files

20753a943e9ee1671ab7081235f96b50c75ec6c7cf0888eb71db6637d4c1eb3c
.exe windows x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ