20ced99121c1a2a64597e4bc59e3b604a5a70ca61a050d14e340862090fce15f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ced99121c1a2a64597e4bc59e3b604a5a70ca61a050d14e340862090fce15f
Size

5.2MB
MD5

05294a1ea2ad8be4b8c4bb0e3f29629f
SHA1

a0526141f41ba2d96de71a68767990a0ce4105a5
SHA256

20ced99121c1a2a64597e4bc59e3b604a5a70ca61a050d14e340862090fce15f
SHA512

a058c9652c44fa1da9fc6034a6f8e7385a3ed219fe579ef409e066834aced64d9445354c8dfb24f6cfd795e82b360cfe3daba32ae84f2d981a0b9472bc99b1f3
SSDEEP

98304:P4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:DNTQUyJN99EjfRdlhRhY3UBLFFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ced99121c1a2a64597e4bc59e3b604a5a70ca61a050d14e340862090fce15f

Files

20ced99121c1a2a64597e4bc59e3b604a5a70ca61a050d14e340862090fce15f
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ