20bb1c8365719bf801db2e038c8d5cd7aa3af15a45b2703f7685f3f2e9c8f2c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20bb1c8365719bf801db2e038c8d5cd7aa3af15a45b2703f7685f3f2e9c8f2c4
Size

2.3MB
MD5

4a7b20d723dd1dd16f8a02f7e52d25ff
SHA1

24e60b60abb5f83d37598fcf6615ee96e203e3ec
SHA256

20bb1c8365719bf801db2e038c8d5cd7aa3af15a45b2703f7685f3f2e9c8f2c4
SHA512

a5a521b6a7ca7e1d4fde4be71ae5aa2c780f8903595dc8342731a467948cad11b857653678267449f89d55229e0e8e5371ec935b65db9318a9fe195fefc9dbca
SSDEEP

49152:+X2s3CxAKF/4XQlQP3j+aSPWvXxjPkcVZA6tsVvN7HMTP2Sl8DY3uW4JRu:yCxAKF/4XQmh+yxjBPXWJNDMSSl8DY3t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20bb1c8365719bf801db2e038c8d5cd7aa3af15a45b2703f7685f3f2e9c8f2c4

Files

20bb1c8365719bf801db2e038c8d5cd7aa3af15a45b2703f7685f3f2e9c8f2c4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

2Jnj~^
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2Jnj~^
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 638KB - Virtual size: 638KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

lDaDCyHD
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ