20b85dda2d4f42aafa2dcadaebc22a6f | Triage

Sharing

General

Target

20b85dda2d4f42aafa2dcadaebc22a6f
Size

1.8MB
MD5

20b85dda2d4f42aafa2dcadaebc22a6f
SHA1

8aa1db803484559b080960f703a575ce199f8f7c
SHA256

db7944bc6b7114bb8be4387d1d70d0f02839a0b635f12a9ce540821bd59eb750
SHA512

dc8df06cbd2fe25524093c6ef2227f45815e2d9a5ffc6426e63ade337a8ff97727cc48fc6416df926a9cf3e326a618d7e284d72410d36fe641a432351e8b0742
SSDEEP

49152:MgOoKmQ2EVUeDvbQbZh9/aOPF7EgNM7XCFAw99Klt6P:k+Q2EVnzQ1hZvM7XCFNK2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b85dda2d4f42aafa2dcadaebc22a6f

Files

20b85dda2d4f42aafa2dcadaebc22a6f
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE