20c29b2a9c8c726d9c1b2e3a687200e7577241932af37cb7774d379a002be83c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20c29b2a9c8c726d9c1b2e3a687200e7577241932af37cb7774d379a002be83c
Size

2.7MB
MD5

9a13d94da504fd6f2b5165bb0581fc2d
SHA1

69722649381134767b4617930706d93515f8bb90
SHA256

20c29b2a9c8c726d9c1b2e3a687200e7577241932af37cb7774d379a002be83c
SHA512

401cc9f4db1cf092be9351b0a3d8a8f45bada35dac070cc0f0d8d062101912d0b0a9aba50c7816937686b5777c4dc98d75cea381a50625126e9c77c8646b9f4a
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl+L8VRiIzYd:c+8X9G3vP3AMQ7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20c29b2a9c8c726d9c1b2e3a687200e7577241932af37cb7774d379a002be83c

Files

20c29b2a9c8c726d9c1b2e3a687200e7577241932af37cb7774d379a002be83c
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ