20f7dca752180ad02e224afabc3e9448 | Triage

Sharing

General

Target

20f7dca752180ad02e224afabc3e9448
Size

240KB
MD5

20f7dca752180ad02e224afabc3e9448
SHA1

ab020851f7ac45b2d67ebd45dcf0dc6b70770844
SHA256

7de79d56b42007ffc4f8b15e0e412db0376bf65120326769d67f4e32b5976bce
SHA512

5745469672cdd585e39538c8526f3e72b1d740a100868a0a9397c382d4e046457ca4ee44c4bc864e768b0f55dc116fc4c5c5c69cf791e11c3368ce8b12185959
SSDEEP

6144:Qtv9TUSDwBsmnVywmGrh+EUrUJGX5jGiZt1Z2wp6JTW0xi:Qtv944wBvVrY7rwGpjG8tT2wpMhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f7dca752180ad02e224afabc3e9448

Files

20f7dca752180ad02e224afabc3e9448
.dll windows:4 windows x86 arch:x86

9bc059fb1ba41707e7db497e461607d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetACP
LoadLibraryExA
GetModuleHandleA
IsBadReadPtr
lstrlenA
GetProcAddress
GetCommandLineA
IsBadHugeReadPtr
ExitProcess
VirtualAlloc
GetCommandLineW
GetOEMCP
LoadLibraryA

Sections

CODE
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ