d0ba4db8907c87bbd61a3ec3b7ba4bc6b69f02cc4f1beacbd4aaae087c301b62

General

Target

d0ba4db8907c87bbd61a3ec3b7ba4bc6b69f02cc4f1beacbd4aaae087c301b62
Size

334KB
MD5

b5b26d87dd71622cd6d76652f62d2019
SHA1

78316e89eac5d67d3bfa4a611ea5fdeab890dada
SHA256

d0ba4db8907c87bbd61a3ec3b7ba4bc6b69f02cc4f1beacbd4aaae087c301b62
SHA512

dede87713e059ec804ef041e1e1e8b23cd1397a2338c91fb53d20a83fc4d905d4668c4cad3a51004dfe1d695c943e81329fa57f47f0c66d8930b99079f038c1a
SSDEEP

6144:52UtueB+O4g/C1ZoreL9VrgQV5iPMfxI/rcac:5x49g/CTVL9Vrgo5iEZI/Iac

Score

N/A

Malware Config

Signatures

Files

d0ba4db8907c87bbd61a3ec3b7ba4bc6b69f02cc4f1beacbd4aaae087c301b62
.exe windows x86

a8a02cfd79d76d0e6239c6aa16c5b1aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
_dll_crt0@0
_impure_ptr
abort
calloc
cygwin_create_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fileno
fprintf
fread
free
fwrite
getc
getopt
isatty
isspace
malloc
memcpy
read
realloc
sprintf
strcpy
strlen
strncpy
vsnprintf
write

kernel32

GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 928B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sbqtvkj
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8a02cfd79d76d0e6239c6aa16c5b1aa

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 150KB - Virtual size: 149KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 928B

.idata Size: 28KB - Virtual size: 29KB

sbqtvkj Size: 76KB - Virtual size: 76KB

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 150KB - Virtual size: 149KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 928B

.idata
Size: 28KB - Virtual size: 29KB

sbqtvkj
Size: 76KB - Virtual size: 76KB