20d3fdf84b28c64109fbee9a0d431f7d | Triage

Sharing

General

Target

20d3fdf84b28c64109fbee9a0d431f7d
Size

60KB
MD5

20d3fdf84b28c64109fbee9a0d431f7d
SHA1

5fea63b82237290749d42d7fe03a7083ff6e82f1
SHA256

6def84115026162d20549b9104e44f9e6ddee6bd55899e968fefc58122eafa32
SHA512

a723777ba9a37d2dbe8d1afe36e1024c720ac33d75a85587772495e9fe977702594af9871bcd23c7a4fc969b1a35bae726f0bb7ffd7dc4e12d28dae2050150be
SSDEEP

1536:Hm7wjsVTJ+p3JrkGLawHE/E2j+EkPtlNAWhCyBCd:M+sVT45mn/bjnIlyoCUCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d3fdf84b28c64109fbee9a0d431f7d

Files

20d3fdf84b28c64109fbee9a0d431f7d
.exe windows:4 windows x86 arch:x86

22423eb3058af0ae47f08ce450d03f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

.text
Size: 55KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nJzcO1Z0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 106B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE