20a59d6fa7df423257750fd4b691173f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20a59d6fa7df423257750fd4b691173f
Size

1.5MB
MD5

20a59d6fa7df423257750fd4b691173f
SHA1

bd6262f44c7e436a12d7c0f9ebb791d9fbab6e27
SHA256

92b7179ba252ca3381b9e781164ba47679bfa237d4478da7851bd124435bb679
SHA512

a2ecb6680d043b27e45cf04c6706878f7499e0d738c9218ee083a7b8d5dab667bf276aa8ffd4722ebb60380a0ec969b7fc2047a8f79e3fa8161717c4aff563bb
SSDEEP

24576:4wN8OMlGIXcRrxmN3lYrnk5+PIGpkLOBc2XkmqEKP6AjVrItgcSNk0DD//op14g9:mOA8xmN3Aek03noj45wlDT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20a59d6fa7df423257750fd4b691173f

Files

20a59d6fa7df423257750fd4b691173f
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 360B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ