ce058e78d914a5bd2b7f23d67438bb6832b443b7eee572d8920997cec3101414

General

Target

ce058e78d914a5bd2b7f23d67438bb6832b443b7eee572d8920997cec3101414
Size

210KB
MD5

f2141c61ae11ebe713a8e8213e9b2554
SHA1

7c0198784656d0afcbe81b13182aaecb86a948a6
SHA256

ce058e78d914a5bd2b7f23d67438bb6832b443b7eee572d8920997cec3101414
SHA512

d83ccfd32f1b86da4e8c637f912073b1ea9f7f9c30eaf81de985a0e9c6079ba5c69fab24275b7dfcdb2ecb485fd52c811b713911920845385829ea8579667550
SSDEEP

3072:pRNArzt6W0h7bqW+taP+zlbcLyM7Zy5yY7GBjEfMmV2QN/Wi+O5El+EWQ:pRK2h7bqL7ax7I5yY2Y0mMSZ5kJWQ

Score

N/A

Malware Config

Signatures

Files

ce058e78d914a5bd2b7f23d67438bb6832b443b7eee572d8920997cec3101414
.exe windows x86

fd48514124db2ac87f1ffd3aab03635d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert_func
__ctype_ptr__
__errno
__getreent
__main
_dll_crt0@0
_exit
_fdopen64
_fopen64
_fstat64
_ftruncate64
_impure_ptr
_open64
_stat64
atexit
atoi
calloc
chmod
close
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fflush
fgets
fileno
flock
fprintf
fputc
fread
free
fscanf
fseek
ftell
fwrite
getc
malloc
memcmp
memcpy
memmove
memset
nice
perror
printf
putc
puts
raise
read
realloc
sched_yield
select
sigaction
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtol
sysconf
tcgetattr
tcsetattr
times
tolower
umask
unlink
vfprintf
vsprintf
write

kernel32

GetModuleHandleA
GetProcAddress
SetConsoleCtrlHandler

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eh_fram
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd48514124db2ac87f1ffd3aab03635d

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 172KB - Virtual size: 170KB

.data Size: 32KB - Virtual size: 30KB

.eh_fram Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 220KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 172KB - Virtual size: 170KB

.data
Size: 32KB - Virtual size: 30KB

.eh_fram
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 220KB

.idata
Size: 2KB - Virtual size: 1KB