20e467eb7fa9b84ecab23d51cf1a752a | Triage

Sharing

General

Target

20e467eb7fa9b84ecab23d51cf1a752a
Size

50KB
MD5

20e467eb7fa9b84ecab23d51cf1a752a
SHA1

040eb2a8ba9a765af65cf3d80c11ef2b65229e60
SHA256

cd86f477b06290d52866762418378b185dacff054a98e9a3c3f00b582f322244
SHA512

43e36dd6f7a3b0f15084f2de07a6b7d68cac9a1067932d101be2fc54175af4ea0cff69e3f0cf1d311eec615a56eeb758d511834582ef982002092fef9009658f
SSDEEP

768:KjrbsPo2rhY/mTJO5tcYjx0AuXy/NEnVwABLIta1VhzmcIjB:WrbovhY+kAXAvEnVw8kw1VAD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20e467eb7fa9b84ecab23d51cf1a752a

Files

20e467eb7fa9b84ecab23d51cf1a752a
.exe windows:5 windows x86 arch:x86

5810caa416dd760cd5ef1a760bd83123

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock

shlwapi

PathFileExistsW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
ExitWindowsEx
FindWindowExA
GetCursorPos
GetDlgItemTextA
GetIconInfo
GetWindowTextA
LoadCursorA
OpenDesktopA
PeekMessageA
SetThreadDesktop

Sections

.uzudix
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jypiz
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.holar
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ