20eb796e0dfa190a3bc9960ada64abbb572193553fdec1b9f8a1196468664463 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20eb796e0dfa190a3bc9960ada64abbb572193553fdec1b9f8a1196468664463
Size

335KB
MD5

97965de47012f43e2529237d828b245d
SHA1

42ff346dff2141f4469c6cce7e9514eb02395cf9
SHA256

20eb796e0dfa190a3bc9960ada64abbb572193553fdec1b9f8a1196468664463
SHA512

9274db26d72da2766f19bc4a96d377db219a8c8712ecf66e2b00b907ad0c30a40c78eb773fc341d4d44591d6ccd78e2d1ba4cad070418f3fbf85ca2b59ff4081
SSDEEP

6144:eKAaEmCMAA9lhg6ZMj83V8lD8DgB8sObFLhFrdEU4nKU2GngnS6IqfCWb33BEV/n:DAA9l7q8F8l4DxsQLhtdEXnKUgzUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20eb796e0dfa190a3bc9960ada64abbb572193553fdec1b9f8a1196468664463

Files

20eb796e0dfa190a3bc9960ada64abbb572193553fdec1b9f8a1196468664463
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 326KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 652B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ