20cd7e25191ccaa49f298931a111de62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20cd7e25191ccaa49f298931a111de62
Size

62KB
MD5

20cd7e25191ccaa49f298931a111de62
SHA1

2df3a43b836fea8eb0f15232d218b1dab60ebc58
SHA256

30d4973f21a5d3f0a551de5488831c55bb03b1f02210e64c2ea678861b09777f
SHA512

3ed1e0f43bc99aa9a3a460a609d671ee2db2fc639e517c5c3efddcd33d82da3e6b8e3bbdf0a35a08667a7aad0b37292f4d9df54aac1b118838d69ec0be6ebb2b
SSDEEP

1536:/1fo2B3yyObTWSz6dglbKTO9/zHflTd7zJ0Bn:/VjyTl2dub8i/7+Bn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20cd7e25191ccaa49f298931a111de62

Files

20cd7e25191ccaa49f298931a111de62
.exe windows:4 windows x86 arch:x86

2f14e9190b233d16a906110fab92c010

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
CreateWaitableTimerW
Process32First
SetConsoleCtrlHandler
CloseConsoleHandle
SetThreadUILanguage
ConvertFiberToThread
UpdateResourceW
GetConsoleCommandHistoryW
GetEnvironmentStrings

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE