20ba0265b353281f191d2381c4e29195 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ba0265b353281f191d2381c4e29195
Size

48KB
MD5

20ba0265b353281f191d2381c4e29195
SHA1

96d822af02d400b7c0e0e0e8951a24122cc8b571
SHA256

f1191f785224eec329213f98235649514fb54633318d16c953b83a3f6f3b8463
SHA512

a23f2725858f5f10b415cf1b60e4406cb1278c35d5748d552f90abab81242eff8166a0c11bf6f36e872244478329560f87e736f572945d2d448497957e591c1a
SSDEEP

768:8nGIZtVBmRDDU+RwoNTdDcRsfrTnlKdepfY4WmtsfEgHniTNsFJHiSR:q3ZtLmRvRtd1cIngd6fYeuNH1BiSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ba0265b353281f191d2381c4e29195

Files

20ba0265b353281f191d2381c4e29195
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE