20efef08f243f09a6d48c9365a57c8af863cc49d2cb988e60c6927d0a2548fec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20efef08f243f09a6d48c9365a57c8af863cc49d2cb988e60c6927d0a2548fec
Size

65KB
MD5

6f2d027b68e1c28a53be5a8d1fbd0491
SHA1

5f8e5906345b22991c07919a41bd548e1b858af1
SHA256

20efef08f243f09a6d48c9365a57c8af863cc49d2cb988e60c6927d0a2548fec
SHA512

22e9a70d2ef2f051a4a98563a7542266fd6d3075590db4c940016d71e8c57b05da0c68cb41667574ad22b71f12ade3d5edc1432a602fda2f6db3b5a38d87b993
SSDEEP

1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oup:7WNqkOJWmo1HpM0MkTUmup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20efef08f243f09a6d48c9365a57c8af863cc49d2cb988e60c6927d0a2548fec

Files

20efef08f243f09a6d48c9365a57c8af863cc49d2cb988e60c6927d0a2548fec
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 49KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE