20419c5b2a9cc95363fd6fe445fb2a0df71176e1ded1363b864616f7e339f6b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20419c5b2a9cc95363fd6fe445fb2a0df71176e1ded1363b864616f7e339f6b2
Size

3.9MB
MD5

7f29423a4af6317c9ce043b0cbd01824
SHA1

257af68c7bcdf19336bc2132671de82afcf18faa
SHA256

20419c5b2a9cc95363fd6fe445fb2a0df71176e1ded1363b864616f7e339f6b2
SHA512

b2f6fdd3320a01384bacf178a70633a6096a3ec4c30f6db4e598fc41e241f024dfdebe1eaa7c838093056a4ab9df966ceffd40daf2b1105f921a2e27bf985750
SSDEEP

49152:YNuHufKpHxUll250VZ/HmLKTVrbGlGF6ApG6JX1fHqT5H5LMzLJctPl9N0L1:YNuHVHClJxGLsZGlGFHqT5HAJc3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20419c5b2a9cc95363fd6fe445fb2a0df71176e1ded1363b864616f7e339f6b2

Files

20419c5b2a9cc95363fd6fe445fb2a0df71176e1ded1363b864616f7e339f6b2
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 926KB - Virtual size: 925KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 217KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ