20b7cd09e348d93c90cfba825cc0f937ba2720497654f48a7e2cca11d0ba6ec6

Sharing

Copy URL Twitter E-mail

General

Target

20b7cd09e348d93c90cfba825cc0f937ba2720497654f48a7e2cca11d0ba6ec6
Size

7.0MB
MD5

bc551fb4b990f92605217f6166e71e8c
SHA1

283b97f52e1169f9a16e1a9b12e3ec2de9f0183e
SHA256

20b7cd09e348d93c90cfba825cc0f937ba2720497654f48a7e2cca11d0ba6ec6
SHA512

7f454c038a92e1e83d65d16518f4eea185d52694eb92f56a4b78fb821c5170d8d4ac6d9f2feed9fb4d76785c7bed456a8e1361ca65301337b5f022aba9e211ad
SSDEEP

98304:qIyb6Q+yEnrhQ7aiFQzuz9WqBS4MN+5GxjupWPcYHeCkoTGfLy2dxLb+bCm/KpVC:JbByYBrwWqJDOypxYHeZoOnL0iVsUXSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b7cd09e348d93c90cfba825cc0f937ba2720497654f48a7e2cca11d0ba6ec6

Files

20b7cd09e348d93c90cfba825cc0f937ba2720497654f48a7e2cca11d0ba6ec6
.exe windows:5 windows x86 arch:x86

b203085e0f03b4013da5456390f2d423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetWindowTextW
CharUpperBuffW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

wtsapi32

WTSRegisterSessionNotification

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n0G
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GC7
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

UHFSDEW
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xyd
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.&/n
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESX
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b203085e0f03b4013da5456390f2d423

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

iphlpapi

wtsapi32

oleacc

gdi32

winspool.drv

oleaut32

Sections

.text Size: - Virtual size: 160KB

.rdata Size: - Virtual size: 40KB

.data Size: - Virtual size: 32KB

.n0G Size: - Virtual size: 232KB

.GC7 Size: - Virtual size: 32KB

UHFSDEW Size: - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.Xyd Size: - Virtual size: 3.8MB

.&/n Size: 2KB - Virtual size: 1KB

.ESX Size: 7.0MB - Virtual size: 7.0MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 47KB - Virtual size: 47KB

.text
Size: - Virtual size: 160KB

.rdata
Size: - Virtual size: 40KB

.data
Size: - Virtual size: 32KB

.n0G
Size: - Virtual size: 232KB

.GC7
Size: - Virtual size: 32KB

UHFSDEW
Size: - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.Xyd
Size: - Virtual size: 3.8MB

.&/n
Size: 2KB - Virtual size: 1KB

.ESX
Size: 7.0MB - Virtual size: 7.0MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 47KB - Virtual size: 47KB