20bbb3b7ffdc4c3f6dd1e003ddb504a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20bbb3b7ffdc4c3f6dd1e003ddb504a5
Size

11KB
MD5

20bbb3b7ffdc4c3f6dd1e003ddb504a5
SHA1

106789a469552318c84f5c4f846d910a71f2fa24
SHA256

e20370dc8d26c51891d68b242ad36a6964dea0a4beeb3346faf2778c936ebcd5
SHA512

f74f042535b367c2e2f4d301c462370b9a2a2070d04837008ec6963853f39e99bf589807a1742fadc45b4d6cb63ea2b3ed6388f20f0914b58c4cb077f8ee7885
SSDEEP

192:eVcvRQ2y9dsX0T6GZRgqG/bkFzezyAnmuAL3HtZDNVQsABTIkpvswPh520:eVcDy9dy0NzezyAX6vDNVuBTtsw20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20bbb3b7ffdc4c3f6dd1e003ddb504a5

Files

20bbb3b7ffdc4c3f6dd1e003ddb504a5
.exe windows:4 windows x86 arch:x86

775cc4b0b0f862bfbd4618e5968ad0e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateMutexA
ExitProcess
GetLastError
InterlockedIncrement
ReleaseMutex
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

_write
__getmainargs
__p__environ
__set_app_type
_assert
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
abort
atexit
fclose
fopen
fprintf
free
fscanf
malloc
memcpy
signal
strcmp

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE