a20dd963349115f52bc7cdb5e8aef04e | Triage

Sharing

General

Target

a20dd963349115f52bc7cdb5e8aef04e
Size

561KB
MD5

a20dd963349115f52bc7cdb5e8aef04e
SHA1

d4e6c38b34d4700fe1a129df8012bc233367dee7
SHA256

ea959ea130ba7bad3a304fe6b85b68193f7a82300be6175f06cb5556ed6bcce9
SHA512

625e1dc38d1be388ccdc4eb99ce12e367500dd6964d39d7cb02699383ca095dc2342a2a3d79b6b384fd6a0e1f2aeb6819e5db51c612730c07882c3a95b54ac12
SSDEEP

6144:qT+KuxJMUN8RUNKBP3npj4/0hvaPmRFJs0ug1MOcKfOHfAo/BJ/Ga3WBNU6ITLUI:vKO9N8bP3nCeK0s0udOLnBNUbTYfUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a20dd963349115f52bc7cdb5e8aef04e

Files

a20dd963349115f52bc7cdb5e8aef04e
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ