20ef00d06f00f9e41ef52d544dfc8c89a623f02f45d579136f2f9406c0cbf595 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ef00d06f00f9e41ef52d544dfc8c89a623f02f45d579136f2f9406c0cbf595
Size

3.0MB
MD5

ee59e5d7cd46025515b20283c2d63350
SHA1

e4484f295ee0e5deb802babf2b2b53bd91e7daca
SHA256

20ef00d06f00f9e41ef52d544dfc8c89a623f02f45d579136f2f9406c0cbf595
SHA512

7ac9d6bd43f38a78f223525130e02b2feff651cfb8ad6f1f8dc10f61ca877f7646c981c4b1e9f25432c615f921e784b8f34280dda1d61cc84de8cd15e0c0c95c
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlMXvwmhT7kvN4t/8ZPa:c+8X9G3vP3AMgo7vN2UZPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ef00d06f00f9e41ef52d544dfc8c89a623f02f45d579136f2f9406c0cbf595

Files

20ef00d06f00f9e41ef52d544dfc8c89a623f02f45d579136f2f9406c0cbf595
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ