20b59884d7f3e5f6dcc76b6bbd22b70c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20b59884d7f3e5f6dcc76b6bbd22b70c
Size

429KB
MD5

20b59884d7f3e5f6dcc76b6bbd22b70c
SHA1

313cf6606b6995f81f5eba9cbe3cfbfbc92ae08b
SHA256

a68b35a5f2f5b799d2e9ebcb7d6586e7c9dcf99e711410f4e2e77ce4a5a1f180
SHA512

1fbe987ecdfda572f2c9e870bbead93f63bd5a62e5a63183957804550f4e737b2377d7f50db7d388e825b5101f2a11ade65d36b11ea798cdbdbcd7d1d7a4dfec
SSDEEP

6144:FWIpTbEtigyKusVXD7hz42aUaHyHkocOvo41st4Y/Q:goAtigFuuXDRaXyHVfKtj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b59884d7f3e5f6dcc76b6bbd22b70c

Files

20b59884d7f3e5f6dcc76b6bbd22b70c
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 342KB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE