126f4047997304755251fc6b849fc672f60d6e753589d9a1c18ae0e31ec15fdb

Sharing

Copy URL Twitter E-mail

General

Target

126f4047997304755251fc6b849fc672f60d6e753589d9a1c18ae0e31ec15fdb
Size

881KB
MD5

4e8b39c1b287b441024603dba6b27106
SHA1

b5e1103a9be3b7eed9aa39d3e87ccb06766e047e
SHA256

126f4047997304755251fc6b849fc672f60d6e753589d9a1c18ae0e31ec15fdb
SHA512

31d165dd462a1103a43108b04064c8255f97ea5698b9be07b7d6e9dec9ee83cf53474c174a66f6164c928eb107699505d2e4511a5038d6e1f1354d37ac912597
SSDEEP

24576:VAz0sR7BiGnPKN+tle9pkgIFoymZmgp0x4ZGU0/ZTFgIgGCh:VAz0sR7UGPm+t8KgIFoymZmgp0xxhuI8

Score

N/A

Malware Config

Signatures

Files

126f4047997304755251fc6b849fc672f60d6e753589d9a1c18ae0e31ec15fdb
.exe windows x86

324a440920eff7eb8ce00f3272141bad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
_ctype_
_fcntl64
_fdopen64
_fopen64
_fstat64
_getgid32
_getpwuid32
_getuid32
_impure_ptr
_lseek64
_open64
_setegid32
_seteuid32
_stat64
abort
access
alarm
atexit
atoi
atol
calloc
close
connect
cygwin_internal
dlclose
dll_crt0__FP11per_process
dlopen
dlsym
dup
dup2
ecvt
exit
fclose
fcvt
fflush
fgetc
fgets
fileno
finite
fork
fread
free
fseek
ftell
fwrite
gcvt
getc
getcwd
getenv
gethostbyname
getpagesize
getpid
gettimeofday
htons
inet_aton
inet_ntoa
isatty
isdigit
isinf
islower
isnan
isprint
isspace
isupper
kill
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
mkdir
pipe
poll
pthread_atfork
pthread_attr_destroy
pthread_attr_init
pthread_create
pthread_getspecific
pthread_join
pthread_key_create
pthread_mutex_lock
pthread_mutex_unlock
pthread_once
pthread_setspecific
pthread_sigmask
puts
qsort
read
realloc
select
setjmp
setlocale
setsid
setvbuf
sigaction
sigaddset
sigemptyset
sleep
socket
sscanf
strcasecmp
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
strtod
strtok
strtol
strtoll
strtoul
strtoull
strxfrm
time
uname
ungetc
unlink
usleep
vfprintf
wait
write

kernel32

AddAtomA
CloseHandle
CreateEventA
CreateFileA
DeviceIoControl
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetDriveTypeA
GetLastError
GetModuleHandleA
GetVersionExA
ResetEvent
SetPriorityClass
SetThreadPriority
WaitForSingleObject

Sections

.text
Size: 638KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

324a440920eff7eb8ce00f3272141bad

Headers

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 638KB - Virtual size: 638KB

.data Size: 54KB - Virtual size: 53KB

.rdata Size: 111KB - Virtual size: 110KB

.bss Size: - Virtual size: 50KB

.idata Size: 4KB - Virtual size: 4KB

.odata Size: 72KB - Virtual size: 72KB

.text
Size: 638KB - Virtual size: 638KB

.data
Size: 54KB - Virtual size: 53KB

.rdata
Size: 111KB - Virtual size: 110KB

.bss
Size: - Virtual size: 50KB

.idata
Size: 4KB - Virtual size: 4KB

.odata
Size: 72KB - Virtual size: 72KB