20b11d7450ee66749967fdbb70c7fc9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20b11d7450ee66749967fdbb70c7fc9f
Size

90KB
MD5

20b11d7450ee66749967fdbb70c7fc9f
SHA1

b2a1af6339c067144d036e0801b0b7022baacdda
SHA256

818cf303c87d1f4424735784bee1a14661e5cc717b6fe3a8aac152226aead8fb
SHA512

7e33a39f5181bb9d440d6fa67a9d8217a385584e84dd59713d9a3672010ef956d4574da6a5be379b81f1462b4c1ac322864d51adb253cd5412ac4777ba20e8c5
SSDEEP

1536:P8ASTuFjAVpkHirBZUVRGzid7MCyV93i6YOI9BgraXg5YlQVaP1LpUWV5P:PCTu5gDrBOrGC7Mvi8qBgTFatLp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b11d7450ee66749967fdbb70c7fc9f

Files

20b11d7450ee66749967fdbb70c7fc9f
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ