20eed4441eab2600d935db7d8384a807[.]exe | Triage

Sharing

General

Target

20eed4441eab2600d935db7d8384a807.exe
Size

4.0MB
MD5

20eed4441eab2600d935db7d8384a807
SHA1

3acf7f616dd5463a73bafb79379a22a1fac6ccde
SHA256

d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00
SHA512

ae67536b2fbe4d88d15e39aa50713f676c0450f53ac5cbd0502d1f66130dfdcda0b9e4476598133400b79c19d4c5d95f15153ca9c81d1c97474e3ea838159624
SSDEEP

98304:ldZzBLmJR0be89sNUsyV4G6utggjMUQe7mMlEfy9HUsc3AX6fi7e:PZzkJebJsNbmV6HPe9Ef00n3jfi7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20eed4441eab2600d935db7d8384a807.exe

Files

20eed4441eab2600d935db7d8384a807.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ