20fb0ff5745ad6175e7511c7d73e5da2

General

Target

20fb0ff5745ad6175e7511c7d73e5da2
Size

99KB
MD5

20fb0ff5745ad6175e7511c7d73e5da2
SHA1

3241150d4ebc5c114e4d663b9e6f4338d8767d60
SHA256

49ce75aae554dcd6da1277f90d6112aac9963c37f54bcbe1c90e7d2e74d8d251
SHA512

a5cc4474693c8ca5b3757446bd82c30b7c12281c3059a045b343a44e5a5a8e34ea2684747c4c6278dbbede43b2ab92b96c7bab9c9a251f70b10b2975bd32538d
SSDEEP

3072:mDL7i184rAElngdxypzaUdTVrlLXa2+mDvf:04xFasrlDYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20fb0ff5745ad6175e7511c7d73e5da2

Files

20fb0ff5745ad6175e7511c7d73e5da2
.exe windows:5 windows x86 arch:x86

cfc8329a05aadbc3cd64deb6c7da113d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

gmtime
_itow
_lseeki64
_wcsdup
_ltoa
_purecall
_endthreadex
time
_ftol
sprintf
wcschr
wcslen
_wcsicmp
bsearch
wcsncpy
fseek
__p__fmode
fflush

advapi32

RegDeleteValueA
ChangeServiceConfigA
EqualSid
FreeSid
RegQueryInfoKeyA
EnumServicesStatusExA
RegOpenKeyExW
RegQueryValueW
LockServiceDatabase
UnlockServiceDatabase
InitializeSecurityDescriptor
GetSecurityDescriptorControl
RegEnumKeyExA
RegDeleteKeyW
LookupPrivilegeValueA
ChangeServiceConfig2A

kernel32

InitializeCriticalSection
WriteConsoleW
GetFileType
GetFileTime
VirtualAlloc
GetModuleFileNameA
GetCurrentProcessId
lstrcpynW
EnumSystemLocalesA
GetLastError
SetStdHandle
CreateProcessW
FindResourceExW
GetThreadLocale
ExitProcess
LoadResource

comctl32

PropertySheetW
ImageList_AddMasked

version

GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW

gdi32

FlattenPath
SetWindowExtEx
GetTextMetricsA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 49KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfc8329a05aadbc3cd64deb6c7da113d

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

comctl32

version

gdi32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 12KB - Virtual size: 13KB

.data Size: 17KB - Virtual size: 27KB

.idata Size: 49KB - Virtual size: 104KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 12KB - Virtual size: 13KB

.data
Size: 17KB - Virtual size: 27KB

.idata
Size: 49KB - Virtual size: 104KB

.rsrc
Size: 20KB - Virtual size: 19KB