20cd8f81034d96f91df2d04a54192f91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20cd8f81034d96f91df2d04a54192f91
Size

143KB
MD5

20cd8f81034d96f91df2d04a54192f91
SHA1

2f57333e88dea81746d95d7bda251b0e0235e97a
SHA256

e2a870640425e3e0d9c9acf650ff10d7488b055d8d794824aa3c8067d89674d8
SHA512

342756e2bb943d3cda236c3830a9b87a70ab8b5b9447004bda3112566a18534e99ee2253bb522eff59e9e3a764e347496b726ea5cc1569d8e43cb3e6e4909c81
SSDEEP

3072:0l1uMOPJmTAtTFUTjnMTWpUy1rYF7Ynm5N:0GRZ4zMi6smT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20cd8f81034d96f91df2d04a54192f91

Files

20cd8f81034d96f91df2d04a54192f91
.dll windows:4 windows x86 arch:x86

a44dd16330ba902414d2af4f9e4ea6e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
FindResourceA
GetACP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTickCount
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
WideCharToMultiByte
lstrcpyA
lstrcpynA
lstrlenW

msvcrt

__getmainargs
__p__commode
__set_app_type
exit
fprintf
printf
realloc
srand
strspn

user32

GetKeyState
GetMenu
ScreenToClient
EnumWindows
EnableMenuItem
CreateMenu
AppendMenuA
DefMDIChildProcA

ole32

CoTaskMemFree
CoGetMalloc
CoCreateInstance
CoBuildVersion

Exports

Exports

ExtTextOutComplex

Sections

.text
Size: 92KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ