acf575188086373944fca98a03d7bc9ef0d70916c73f964c8fdfc1d0c375530b

Sharing

Copy URL Twitter E-mail

General

Target

acf575188086373944fca98a03d7bc9ef0d70916c73f964c8fdfc1d0c375530b
Size

130KB
MD5

d78efbb023bde8552701a89fa9ca8708
SHA1

feb0a71d8bfbd1e5e3dcad5cf5165e50e500740e
SHA256

acf575188086373944fca98a03d7bc9ef0d70916c73f964c8fdfc1d0c375530b
SHA512

c75160ed06e921a9eb8910e9cd1751b73ee977331513848633733a7c8e624804a0bf0d4bf9447bc3ef171109b16b81e6a02b93e0fb53874a319f9cf99952e237
SSDEEP

3072:ImVsCnZgAtvbzZVGtlmWMyEBKGGNJwVAVNntJU3Oo2ZS:IenZ3dCmWSBKuM+ZWS

Score

N/A

Malware Config

Signatures

Files

acf575188086373944fca98a03d7bc9ef0d70916c73f964c8fdfc1d0c375530b
.exe windows x86

d5cbea2901b7973f817124c7ad73eb7f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert_func
__ctype_ptr__
__errno
__getreent
__locale_mb_cur_max
__main
_acl32
_dll_crt0@0
_exit
_fcntl64
_fstat64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_stat64
_tzname
abort
access
atexit
btowc
calloc
clock_gettime
closedir
cygwin_detach_dll
cygwin_internal
dirfd
dll_dllcrt0
exit
fclose
fflush
fprintf
fputs
free
frexp
fwrite
getenv
getopt_long
getpwnam
gettimeofday
gmtime_r
ioctl
isatty
iswcntrl
iswctype
iswprint
ldexp
localeconv
localtime
localtime_r
longjmp
malloc
mbrtowc
mbsinit
mbsrtowcs
mbstowcs
memchr
memcpy
memmove
mempcpy
memset
mktime
nl_langinfo
opendir
optarg
optind
printf
putc_unlocked
putchar_unlocked
raise
readdir
readlink
realloc
setjmp
setlocale
sigaction
sigaddset
sigemptyset
sigismember
signal
sigprocmask
snprintf
sprintf
stpcpy
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror_r
strftime
strlen
strncmp
strncpy
strrchr
strtoul
strtoumax
tcgetpgrp
tolower
toupper
towlower
tzset
wcscat
wcslen
wcstombs
wctype
wcwidth
wmemchr
wmemcpy

cygintl-8

libintl_bindtextdomain
libintl_dcgettext
libintl_gettext
libintl_textdomain

cyggcc_s-1

__deregister_frame_info
__divdi3
__fixunsxfdi
__moddi3
__register_frame_info
__udivdi3
__umoddi3

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5cbea2901b7973f817124c7ad73eb7f

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

cygintl-8

cyggcc_s-1

kernel32

Sections

.text Size: 102KB - Virtual size: 102KB

.data Size: 19KB - Virtual size: 18KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 4KB

.idata Size: 7KB - Virtual size: 6KB

.text
Size: 102KB - Virtual size: 102KB

.data
Size: 19KB - Virtual size: 18KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 4KB

.idata
Size: 7KB - Virtual size: 6KB