c61d509cc9f02f3530e86ccbcbe1303cea0db0e3bf2997f52d5b3a67318c2ca3

General

Target

c61d509cc9f02f3530e86ccbcbe1303cea0db0e3bf2997f52d5b3a67318c2ca3
Size

213KB
MD5

8360ef8ac443eed11be142369bb831d0
SHA1

4bf823cf8545ab8a8c52ecff99306fc2e6231ccd
SHA256

c61d509cc9f02f3530e86ccbcbe1303cea0db0e3bf2997f52d5b3a67318c2ca3
SHA512

7b7408409b7734f2d147c523d79441ef9e1a0228e4b3a8f263ea4ab9ed2c6ba6086b6317374bdd5ebf43296955a44d84427b359c97736d045b1d0c261a18a09e
SSDEEP

3072:uVj4nWs0c7rHq6IGWclOgRmnIRSDfN1el83iqsnxthzpU6ALe+TTOqeCYxzu6H1u:AzonHqwOemndfelQaFFMLVQ9u6Vo6Rh8

Score

N/A

Malware Config

Signatures

Files

c61d509cc9f02f3530e86ccbcbe1303cea0db0e3bf2997f52d5b3a67318c2ca3
.exe windows x86

9ccd6ba8fe86723e34a9938999493b4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__isnand
__main
__mb_cur_max
__signbitd
_chown32
_ctype_
_exit
_fchown32
_fcntl64
_fseeko64
_fstat64
_ftruncate64
_getegid32
_geteuid32
_getgid32
_getgrnam32
_getuid32
_impure_ptr
_lchown32
_lseek64
_lstat64
_mknod32
_open64
_setregid32
_setreuid32
_stat64
abort
access
atexit
btowc
calloc
chdir
chmod
close
closedir
cygwin_conv_to_full_win32_path
cygwin_internal
dll_crt0__FP11per_process
dup
endgrent
endpwent
execlp
exit
fchdir
fchmod
fclose
fflush
fork
fprintf
fputs
free
frexp
futimes
fwrite
getcwd
getenv
getline
getpagesize
getpwnam
iswalnum
iswctype
iswlower
iswprint
ldexp
link
malloc
mbrtowc
mbsinit
memchr
memcpy
memmove
mempcpy
memset
mkdir
mkfifo
nl_langinfo
opendir
pathconf
printf
putc_unlocked
putchar_unlocked
raise
read
readdir
readlink
realloc
rename
rmdir
setlocale
signal
snprintf
sprintf
strcasecmp
strchr
strcmp
strcpy
strerror_r
strlen
strncmp
strndup
strspn
strtoul
symlink
towlower
towupper
umask
unlink
utimes
waitpid
wcrtomb
wcscoll
wctype
write

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetACP
GetModuleHandleA

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 952B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9ccd6ba8fe86723e34a9938999493b4a

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 126KB - Virtual size: 126KB

.data Size: 512B - Virtual size: 60B

.rdata Size: 13KB - Virtual size: 12KB

.bss Size: - Virtual size: 952B

.idata Size: 72KB - Virtual size: 72KB

.text
Size: 126KB - Virtual size: 126KB

.data
Size: 512B - Virtual size: 60B

.rdata
Size: 13KB - Virtual size: 12KB

.bss
Size: - Virtual size: 952B

.idata
Size: 72KB - Virtual size: 72KB