20b302d65eeab9bd01f48aba8f42b260N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20b302d65eeab9bd01f48aba8f42b260N.exe
Size

37KB
MD5

20b302d65eeab9bd01f48aba8f42b260
SHA1

ad7ddc624321d8296c9d063d3df922f2768c81b9
SHA256

dedc501ac64f9408eddeee5ddd11496eada89f998297678b09f961a3f8a1e080
SHA512

28a8e9142540cb4317340b69ca44adc936fdf1dee54ecb82957599838f1cb8c8f0bfe659109dc540511cc335976786a34d56b2786a50d220048ee9b4fe2f80e0
SSDEEP

768:mzQL/qXL7g5AQRBIFGEjvM0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGWx:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b302d65eeab9bd01f48aba8f42b260N.exe

Files

20b302d65eeab9bd01f48aba8f42b260N.exe
.exe windows:5 windows x86 arch:x86

a3e8b5e80d5f9f266119a4ac18211954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
LoadCursorA
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FillRect
GetWindowRect
KillTimer
SetWindowPos
BeginPaint
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ