20b944480b39a1938b3f739f5811b659 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20b944480b39a1938b3f739f5811b659
Size

385KB
MD5

20b944480b39a1938b3f739f5811b659
SHA1

53ec9ab77fc2e637069fec66f935ba3c3ccc9e72
SHA256

d4200f9852184a95bd9466284154b924256f84f2bd1394e13b904987be90b12a
SHA512

cc8ca1e09215e7460ef0c5fbd9ce6e91bf7b44184f25f4ceb811ebddb998df9352db91ed3ace34a47e3ecccb629238ed195e9a7d1964a26d49d7adde608f01a5
SSDEEP

12288:9mcoyFqYSvvQSsCia1SRnGdwsYIKm/YhZoB:cyFnCiTR2wBIT/YhZoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b944480b39a1938b3f739f5811b659

Files

20b944480b39a1938b3f739f5811b659
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ