20a28d69dd70164ba676d0cb3d1ee751 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20a28d69dd70164ba676d0cb3d1ee751
Size

655KB
MD5

20a28d69dd70164ba676d0cb3d1ee751
SHA1

02431da8f8e01daa3d1e83c808057b9c029d3662
SHA256

1d3078cf028348d7590636af13f2373742793dccf742dcf10c95c0b408c87710
SHA512

d76ccd4be540ba7a2ad0316ce94abc4c0b08ed3ce423f6c94c3b153c94682a42d539ce89d6367c9fbe881e1b56aa86e5b14ca800486be1279fee1fbb98245d44
SSDEEP

12288:xgUQhcUB+G1sv5/HYI5T6SaCOimeT5ynWDosz7hGvVMoSOchY30Ym:xgUQhcUB+GmHY3CnmeT5ynWDo4hGvGCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AviraToKey.exe

Files

20a28d69dd70164ba676d0cb3d1ee751
.rar
AviraToKey.exe
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
使用手册.txt
关于申请的问题（重要）.txt
新云软件.url
.url