20e6a5998e80acec0518982bc9a93c4288aa1615cccab5fca23156280f5793a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20e6a5998e80acec0518982bc9a93c4288aa1615cccab5fca23156280f5793a0
Size

765KB
MD5

08f6094c01883a41157e10c2bf35f0a2
SHA1

7fd2bba05f29e5bc9e595a71f9392c6fa0ccc1de
SHA256

20e6a5998e80acec0518982bc9a93c4288aa1615cccab5fca23156280f5793a0
SHA512

b2aa97956b059cd7658124942e9b1cabd17648976566f92be9b175aa5ab39033cfebcc8380c7c727394089d702bbd6eed9ef0b89afde6d66e154622faab9267e
SSDEEP

12288:KyBPJwKcI/UGkZyFWj/WsDxISVG6dilarDIN3WliRTciBZb/+2NI+0xJQ:pBhcFGkZyFWj7DG/64arDbkh/tI+0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20e6a5998e80acec0518982bc9a93c4288aa1615cccab5fca23156280f5793a0

Files

20e6a5998e80acec0518982bc9a93c4288aa1615cccab5fca23156280f5793a0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JYHV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ