dfdb3046c04ae8b1c25c4baf429357207a6fe6a843dea2eacc84ca1b5c43b08c

Sharing

Copy URL Twitter E-mail

General

Target

dfdb3046c04ae8b1c25c4baf429357207a6fe6a843dea2eacc84ca1b5c43b08c
Size

710KB
MD5

8126617337fc0204f06f9086a9232c60
SHA1

cc9299b6360318311703e15f2eb40b21d13e133c
SHA256

dfdb3046c04ae8b1c25c4baf429357207a6fe6a843dea2eacc84ca1b5c43b08c
SHA512

95d49abe3939715d7ed64b37f658c8cdb841eeeb3d0a5751871f3638625e20ed2e0aeb60397fd1e9edfdcf02e66f703afa8d8ff64b5f2ff6caad896b9bcfdea7
SSDEEP

12288:yyfyvG5gXvic7rye5h2lJaVqbmlcaLi/nQR0d/IMNWATlvxFELzj:ypvCe5h2lJaVSmlch5/Io3TlpFEvj

Score

N/A

Malware Config

Signatures

Files

dfdb3046c04ae8b1c25c4baf429357207a6fe6a843dea2eacc84ca1b5c43b08c
.exe windows x86

1d22e09f2aca75262f169ab3ef8a52c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert_func
__errno
__getreent
__main
_chown32
_dll_crt0@0
_exit
_fcntl64
_fdopen64
_fopen64
_fseeko64
_fstat64
_ftello64
_getgid32
_getuid32
_impure_ptr
_lstat64
_open64
_stat64
abort
access
asprintf
atoi
calloc
chmod
close
ctime
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fflush
fileno
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getcwd
getenv
isatty
malloc
memchr
memcpy
memmove
memset
mkdtemp
mkstemp
mkstemps
perror
printf
putc
qsort
read
realloc
realpath
rename
sbrk
snprintf
sprintf
sscanf
strcasecmp
strcat
strchr
strcmp
strcpy
strcspn
strdup
strerror
strlen
strncasecmp
strncat
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
time
umask
unlink
utime
vfprintf
write

cygintl-8

libintl_bindtextdomain
libintl_dgettext
libintl_gettext
libintl_textdomain

cyggcc_s-1

__deregister_frame_info
__moddi3
__register_frame_info
__umoddi3

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1d22e09f2aca75262f169ab3ef8a52c9

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

cygintl-8

cyggcc_s-1

kernel32

Sections

.text Size: 496KB - Virtual size: 496KB

.data Size: 133KB - Virtual size: 133KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 17KB

.idata Size: 79KB - Virtual size: 80KB

.text
Size: 496KB - Virtual size: 496KB

.data
Size: 133KB - Virtual size: 133KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 17KB

.idata
Size: 79KB - Virtual size: 80KB