20c00490073d178d700ea9fc5c66962935f874c704833bd95bb0f20cbf0e81a7 | Triage

Sharing

General

Target

20c00490073d178d700ea9fc5c66962935f874c704833bd95bb0f20cbf0e81a7
Size

313KB
MD5

6327191c97297473cbd16fe27c5e23c9
SHA1

43cb395c65b39956efcabe330b9eb5969939c77c
SHA256

20c00490073d178d700ea9fc5c66962935f874c704833bd95bb0f20cbf0e81a7
SHA512

d66ee18d30d13df99b07998ba51a8fee446a10795480bebe9f1091a590e93b895cff9f133a78a4e918c20e030f214b79c9fadfe5d6818be8c6486646099e4a78
SSDEEP

6144:DtoxwySMnzhaYcBNKuJfXrabgjGtho1ruvVTjWRgdhgLYPgokEdoHyY3lnZO:Du/Fn8YcnKwf+EGw1ujWRMCUgokEaHyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20c00490073d178d700ea9fc5c66962935f874c704833bd95bb0f20cbf0e81a7

Files

20c00490073d178d700ea9fc5c66962935f874c704833bd95bb0f20cbf0e81a7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\t1sw532i6yy\obj\Release\' .pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ