20605e0de5b3c45b3c45cd07672e0be8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20605e0de5b3c45b3c45cd07672e0be8
Size

84KB
MD5

20605e0de5b3c45b3c45cd07672e0be8
SHA1

3a0e00e93ac3577dd83bd5f5142606f09520362e
SHA256

58e99fab2daaaba12bbc7ecf981765de68af815557c64cc2cdbe7533f777a5c8
SHA512

bcb6b6040df530198c408009bcb65943ced232bb3046d386ab1df3686463b322713a8fadc489c41c9b739740772473da0bb88b1fe2c12f738b9cf1d3554827b1
SSDEEP

1536:P3+PYWffe+K4XCkl9hJcsNQY6ppQ7e3rMvUczfIVKPHtocBmmJMfExvhaVXEM:P31cfeQl9hTQY6rQ7e7MvUczWKPHtoco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20605e0de5b3c45b3c45cd07672e0be8

Files

20605e0de5b3c45b3c45cd07672e0be8
.exe windows:4 windows x86 arch:x86

5b123eef2a8188eafdff88826962a970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fclose
_adjust_fdiv
_setmode
_exit
free
__dllonexit
fwrite
_initterm
__getmainargs
exit
_stricmp
__p__fmode
realloc
_vsnprintf
__setusermatherr
_acmdln
_XcptFilter
malloc
__p__commode
fopen
_except_handler3
strcmp
memset
cos

kernel32

GetModuleHandleW
GetStartupInfoA
VirtualProtect

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ