09849c0cd9c4acce6f7d3545114c86ae3408d29499c2df71b5cf30d246814515

Sharing

Copy URL Twitter E-mail

General

Target

09849c0cd9c4acce6f7d3545114c86ae3408d29499c2df71b5cf30d246814515
Size

296KB
MD5

da972c53a04dcf64c5e5d8249f71e3e9
SHA1

892a8755a3a78a215cfc08d58701929635711fcf
SHA256

09849c0cd9c4acce6f7d3545114c86ae3408d29499c2df71b5cf30d246814515
SHA512

c45aab32c23beb542d3f6506b229a47132a0527ec55325c46eeec85e6e18429fafb826fc953bae0af84aa8f9c19ab11a2b9d1aab720a09dff49522bb2311cf03
SSDEEP

6144:xAj3qxKOWTzMvk5UjMOzjXgw9aoe/NvxuR+uObslinA:xAj32hoZOXXgw9ENG+ucsO

Score

N/A

Malware Config

Signatures

Files

09849c0cd9c4acce6f7d3545114c86ae3408d29499c2df71b5cf30d246814515
.exe windows x86

14f6d9537c317f7a9e7d9cfe6245c528

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_chown32
_ctype_
_exit
_fcntl64
_fdopen64
_fopen64
_freopen64
_fstat64
_ftruncate64
_geteuid32
_getgid32
_getgrgid32
_getgrnam32
_getpwuid32
_getuid32
_impure_ptr
_lchown32
_lseek64
_lstat64
_mknod32
_open64
_setgid32
_setuid32
_stat64
_tzname
abort
access
atoi
atol
btowc
calloc
chdir
chmod
clock_gettime
close
closedir
cygwin_internal
dll_crt0__FP11per_process
dup
execl
execlp
execv
exit
fchdir
fclose
fflush
fileno
flockfile
fork
fprintf
fputc
fputs
free
fscanf
fseek
fsync
funlockfile
futimes
fwrite
getc_unlocked
getcwd
getenv
getline
getpagesize
getpid
getpwnam
gettimeofday
gmtime
ioctl
iswalnum
iswctype
iswlower
iswprint
kill
link
localeconv
localtime
localtime_r
malloc
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
mkdir
mkdtemp
mkfifo
nl_langinfo
opendir
pathconf
pipe
putc_unlocked
qsort
read
readdir
readlink
realloc
rename
rmdir
setenv
setlocale
signal
sleep
snprintf
sprintf
strcat
strchr
strcmp
strcpy
strdup
strerror
strerror_r
strlen
strncasecmp
strncmp
strncpy
strndup
strspn
strtoimax
strtok
strtoul
strtoumax
symlink
sysconf
time
towlower
towupper
umask
unlink
unsetenv
utimes
vfprintf
vsnprintf
waitpid
wcrtomb
wcscat
wcscoll
wcslen
wctype
wmemchr
wmemcpy
write

cygiconv-2

libiconv
libiconv_open

cygintl-8

libintl_bindtextdomain
libintl_dgettext
libintl_gettext
libintl_ngettext
libintl_textdomain

kernel32

GetACP
GetModuleHandleA

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14f6d9537c317f7a9e7d9cfe6245c528

Headers

File Characteristics

Imports

cygwin1

cygiconv-2

cygintl-8

kernel32

Sections

.text Size: 243KB - Virtual size: 242KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 37KB - Virtual size: 36KB

.bss Size: - Virtual size: 5KB

.idata Size: 11KB - Virtual size: 11KB

.text
Size: 243KB - Virtual size: 242KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 37KB - Virtual size: 36KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 11KB - Virtual size: 11KB