20f23d4587aa7ce460096d129923379e0faf97f5d81edc5b442885327074dbdeN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20f23d4587aa7ce460096d129923379e0faf97f5d81edc5b442885327074dbdeN
Size

43KB
MD5

c5f965e62a51ee4c75a537d8b285a210
SHA1

917b3d608bfae528cd593d316370030fbc2ddaf8
SHA256

20f23d4587aa7ce460096d129923379e0faf97f5d81edc5b442885327074dbde
SHA512

c68968f8933e057945ace9f9da00574bb28d7fdad8d221df77c2fbddfcf32e5157b63c62b1c25220afd31bb7e52b405e825a39afdccdebb2e1c44434aeae4be9
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhE:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f23d4587aa7ce460096d129923379e0faf97f5d81edc5b442885327074dbdeN

Files

20f23d4587aa7ce460096d129923379e0faf97f5d81edc5b442885327074dbdeN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE