20b5ee42a277664b8fdcb3dad6e44730N[.]exe | Triage

Sharing

General

Target

20b5ee42a277664b8fdcb3dad6e44730N.exe
Size

3KB
MD5

20b5ee42a277664b8fdcb3dad6e44730
SHA1

7c178721a58361a9786c9344f8678d0f8a8ebcce
SHA256

29588f6d69bc6f345749955311d8190273f2791edc17b93172cf2b925d45e4e4
SHA512

25d44223ba94326f1c11a062cc207cab4a94e6e2df5f99aa405080c14c2285d3474090016ce2ed48082f19b2840853fb0c605d6597545973b453d4c6be7d3ec3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b5ee42a277664b8fdcb3dad6e44730N.exe

Files

20b5ee42a277664b8fdcb3dad6e44730N.exe
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

API-MS-Win-Core-Heap-L1-1-0.pdb

Exports

Exports

GetProcessHeap
GetProcessHeaps
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
HeapSummary
HeapUnlock
HeapValidate
HeapWalk

Sections

.text
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ