20d08ef475035a88ea8683ae2ca72489 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20d08ef475035a88ea8683ae2ca72489
Size

10KB
MD5

20d08ef475035a88ea8683ae2ca72489
SHA1

eb55c13ca9964750959c0ad6bbe8fb7124522dd4
SHA256

cfcdd12dd044eb7991931081f160c486e728e2afb6d1ed5b5477196969a9c686
SHA512

c355e5946d1a5b3a65068ef941d1193e61d3874a861553c08f9dc6fd32c5244fa630df4922052cf214292c08d441ddfc57c773dc7ea1e98ce29a82f0d028f5f8
SSDEEP

96:Z1KE35f1ymALApPAeCiTwwj0tARO5Q68GqK409txSZKPW9NkSly2jex:935fsZMxNCiUybRwFZqd09txSZMWHHe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d08ef475035a88ea8683ae2ca72489

Files

20d08ef475035a88ea8683ae2ca72489
.dll windows:1 windows x86 arch:x86

55500bccf84aab6f1a0afeda9b555398

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
ExitThread
GetFileSize
GetFileTime
GetLastError
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileExA
ReadFile
SetFilePointer
SetFileTime
Sleep
VirtualAlloc
WriteFile

Exports

Exports

rand

Sections

.Proxy
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE