020aa32469e60017dec20c511dafe490 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

020aa32469e60017dec20c511dafe490
Size

44KB
MD5

020aa32469e60017dec20c511dafe490
SHA1

8499d912a429af9e06fe6757c1871d9e960b0a63
SHA256

1c455d1166acf992752a49537bc4596284c8c77d6223dcc1149780881a56693e
SHA512

cd95e631cbffcbb1210e264b483dcf20be2dfe2ebf9369475161f2886283738c9fb03fa45025e7598c03596869e13f49bf7127891be1a9ba5d67afe14d45e677
SSDEEP

768:omELeJHF92H56u05/2Prn+zQ8CmsbjBLBZO6TjzCaO6Tj7OzuRVfsZc7R6TjZaOt:omEG9y56XibOQiEjpXCyrvs6s1yCz7FD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020aa32469e60017dec20c511dafe490

Files

020aa32469e60017dec20c511dafe490
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 1024B - Virtual size: 653B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nah
Size: 1024B - Virtual size: 661B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nah
Size: 669B - Virtual size: 669B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ