20fb9c64c16083dea61d042f9e93d3e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20fb9c64c16083dea61d042f9e93d3e3
Size

2.2MB
MD5

20fb9c64c16083dea61d042f9e93d3e3
SHA1

c16f075788c415c8ad9a5cfc0e62ddbb2119e9bb
SHA256

3a3de0c354969add5bb958548ca1d740e866871c39c5690d0915dbd89c97f037
SHA512

b3d7023bd3d9de185c08c28fd801fec84fd67c1af3a30cb68e1d0667936dd9bc112d7dc57a5a30ccfe274423c9035d7eb66162b91dd145e754403d9783af613e
SSDEEP

24576:YtgGi19K3UZREYf0F84tKC2oQAHoBKVGK2ngj0fbC0VYiALLuAgqX0Maac66STWn:ER2Vx0FKAH8SV0fbnYNgyoat68WgSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20fb9c64c16083dea61d042f9e93d3e3

Files

20fb9c64c16083dea61d042f9e93d3e3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE