20911643981a767cd88c752be682971afce0b1f56a75f46c9774585521626f1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20911643981a767cd88c752be682971afce0b1f56a75f46c9774585521626f1c
Size

24KB
MD5

ea6858405f29b4d9c1f3faac1fee5724
SHA1

ee74f534242ba00acbd6862ced607c2a5fab4310
SHA256

20911643981a767cd88c752be682971afce0b1f56a75f46c9774585521626f1c
SHA512

e090a8efb7e2cb0403435af5ac46bd16b1153f061c032f3fec9fb4729274e8e8d9e38c3c26b1fb81f2b158342e1bd2e7562efac364eed7399eca25ccfa5e44c9
SSDEEP

384:cAEJF01WXuOWGt60lLyzoNoBt8LTjTZoErIkc36aLpB:zmu2t60YDwZoEc33z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20911643981a767cd88c752be682971afce0b1f56a75f46c9774585521626f1c

Files

20911643981a767cd88c752be682971afce0b1f56a75f46c9774585521626f1c
.exe windows:5 windows x86

172a6440b3152d86a4392d15946c54ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW

shell32

ShellAboutW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE