20e289d3981b34ff306635d905456c91

General

Target

20e289d3981b34ff306635d905456c91
Size

136KB
MD5

20e289d3981b34ff306635d905456c91
SHA1

d37a5fe3907a378833f9be1d3d58a285696bd2ca
SHA256

3debb09680c6be19443ad8915695696762de39142aaf66178c2b305ca376c36d
SHA512

ecd233916b5a9ab36ef55ec3fe9a2d2ad5b8f4f9b4373ce9f33a37e17d5663555f396036f46e690a1b4a75afbdb75d6fde59b75c52e1611f3ca4b6fad3d4414a
SSDEEP

3072:H8FMX1AQwCC/lVDymy6n8d7MCxaUr10iZ4pHKHv3MtW8lag:c+X2Qwdn87MlUrTW/tHl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20e289d3981b34ff306635d905456c91

Files

20e289d3981b34ff306635d905456c91
.exe windows:4 windows x86 arch:x86

9e45d8bad8a06461dbf25e204b7731bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathQuoteSpacesA

kernel32

GetVersionExA
VirtualProtect
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetModuleHandleA
CreateProcessA
GetProcAddress
LoadLibraryA
WinExec
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
GetSystemTime
ExitProcess
CopyFileA
Sleep
CreateThread
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
InterlockedExchange
RtlUnwind
FlushFileBuffers
SetStdHandle
GetStartupInfoA
GetCommandLineA
GetSystemInfo
HeapFree
GetLastError
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc

user32

LoadAcceleratorsA
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
DestroyWindow
LoadStringA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
CreateWindowExA
ShowWindow
UpdateWindow
DialogBoxParamA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9e45d8bad8a06461dbf25e204b7731bc

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 9KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 9KB