20c677bfe746ef21cb647ec197118313 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20c677bfe746ef21cb647ec197118313
Size

500KB
MD5

20c677bfe746ef21cb647ec197118313
SHA1

579f6027d4f2d2d26d0a66080b60f00069aad5a0
SHA256

3a202ee1deaeda21a66a8de098965cdbd111b3a53c9ab85be0d282d9464c96c1
SHA512

c5a276d717c19563a0391d3aa0d7d084334126b3bb9aae95fecacd1b0fa340060ce182b417120e82d92abd0c84f4cf51e94806a4443bc6ca6ecf77ea33c3e4a0
SSDEEP

12288:9caIS4qCQ/s50L2ArSmPoPdAttEOpmysMkPQadTPxywtP:A7zXA2ArfPoP0tEOjsLPQuyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20c677bfe746ef21cb647ec197118313

Files

20c677bfe746ef21cb647ec197118313
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ