20b8fc888d39797a95a015b9fcb0cda0N[.]exe | Triage

Sharing

General

Target

20b8fc888d39797a95a015b9fcb0cda0N.exe
Size

155KB
MD5

20b8fc888d39797a95a015b9fcb0cda0
SHA1

4cec6db2e47fdb05739e42fe59bb1d83e5ec3ef8
SHA256

82db106b0360e456bbf654213db568576765115a8c73c48315a731af30c4365f
SHA512

87339d6bbcaf14066f78ad2051ed9d83b80605e35f7f10f240ffced0e5cde9a64532f035287e06b8a713d9f1a0593a1477e317091af630e65136bee6f1275a96
SSDEEP

1536:2mZmg5zb02q/t6jOFvDO7slsF9PS24s+lSmSWQWOxzlAuT29X1N5UbsGt3kcm8xm:JZmCb6ROF96zMq19XAHtUcmKO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20b8fc888d39797a95a015b9fcb0cda0N.exe

Files

20b8fc888d39797a95a015b9fcb0cda0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SimpleDetector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ