c20db33aa891b932f6dd91e0f78d1ef7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c20db33aa891b932f6dd91e0f78d1ef7
Size

30KB
MD5

c20db33aa891b932f6dd91e0f78d1ef7
SHA1

1492561b43a8d89f4f6a654ff965ae773e017845
SHA256

5f9847e2ce7ec00270f06d2f04b0c69fe31e4ec14455555a6409f4b9a442ba4d
SHA512

46af46a24110cf4fd798eccba7bccd11edc0bdd2ecad6e88e764a7acb0a8011b118b6799a02fe55c2b1ad394a0764d8f2025ee128d1a2aa5ccd75ec357e33d34
SSDEEP

384:I+4tn+9Que6nJ1ouyo6H9xPPZ7Ztl68inKn9s:I+W+ne63CjPmSs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c20db33aa891b932f6dd91e0f78d1ef7

Files

c20db33aa891b932f6dd91e0f78d1ef7
.exe windows:4 windows x86 arch:x86

ba7252c17d0494376c06953aae91d8d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrA

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__p___argc
__p___argv
__stdio_common_vsprintf
_configure_narrow_argv
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
_strdup
exit
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE