b20da49acae85819413ce3b2224fa410 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b20da49acae85819413ce3b2224fa410
Size

148KB
MD5

b20da49acae85819413ce3b2224fa410
SHA1

7ee093fb063755035146572886de20437eff2179
SHA256

948212ae32917c6c357023b2703b9cb3a1576c536049e9ba07e8264b25c427cc
SHA512

7f199f6894f1bec90fc42eb5741cf541f66a0211b9c059bfd2672bab74565e6b120cd417cf5b82298fe38a830b5f8cdccc31e3a2735e0a017766b741ada1b49f
SSDEEP

3072:+v5JZ/SYGLPXOxvBugFa5SrieA4ptXkrvBkZXUqbaHdcxOO3Krp3t3X:65LSYGLPXOxvYgFZA4ptXkrZkZXUqWH7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b20da49acae85819413ce3b2224fa410

Files

b20da49acae85819413ce3b2224fa410
.exe windows:5 windows x86 arch:x86

2078bc482fc61dda3261cc7caf0cf7a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

snmpapi

SnmpUtilMemAlloc
SnmpUtilMemFree

wsock32

htonl
ioctlsocket
inet_addr
gethostbyname
ord1100
ord1101
WSAStartup

kernel32

LocalFree
GetVersion
FormatMessageA
GetLastError
CloseHandle
GetProcAddress
LoadLibraryA
GetVersionExA
DeviceIoControl

msvcrt

fprintf
toupper
atoi
_stricmp
_strupr
printf
exit
sprintf
_ultoa
qsort
free
malloc
strncpy
calloc
time
__p__iob
_setmode
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

advapi32

RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA

user32

CharToOemA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ