20aa9db70bf37638d59e68c58ca1f021

General

Target

20aa9db70bf37638d59e68c58ca1f021
Size

28KB
MD5

20aa9db70bf37638d59e68c58ca1f021
SHA1

86c43a36504301ba71aee3399107888312ea9a75
SHA256

fb658f7fc66ae471571d6979f3be7794e09d6c426f88fa32a6c7171c9c9a3b97
SHA512

18539205272a13f6fd25556147e9030ec6e04e4274cb5e44225ac62103cb1f8093e0f73661a2a7648404e5ec8408e256ead783276d636b45a5f833b89d058a71
SSDEEP

768:ddW6junwdlw/8yHHph1J/+XFi2Evx2hVs/86q:dd9j1dl/4f1J/72EvxgQ83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20aa9db70bf37638d59e68c58ca1f021

Files

20aa9db70bf37638d59e68c58ca1f021
.dll windows:4 windows x86 arch:x86

a75076cda9f6daf75864c6c59c509a06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
DeleteFileA
GetFileSize
GetFileType
GetProcAddress
LoadLibraryA
ReadFile
SetEndOfFile
VirtualAlloc
VirtualFree
VirtualProtect

user32

BeginPaint
CheckMenuRadioItem
CheckRadioButton
CreateMenu
CreateWindowExA
DestroyCursor
DestroyWindow
EndPaint
ExitWindowsEx
FindWindowExA
GetCapture
GetCursorPos
GetDC
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowDC
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsWindow
KillTimer
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseCapture
SendMessageA
SetCursor
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetPropA
SetScrollPos
SetScrollRange
SetSysColors
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
ValidateRect
WaitMessage
wvsprintfA

gdi32

SetWindowOrgEx
StretchBlt
TextOutA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a75076cda9f6daf75864c6c59c509a06

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 8KB - Virtual size: 8KB

.code Size: 2KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 4KB

.bss Size: 1KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

CODE Size: 9KB - Virtual size: 36KB

.text
Size: 8KB - Virtual size: 8KB

.code
Size: 2KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 4KB

.bss
Size: 1KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB

CODE
Size: 9KB - Virtual size: 36KB