cygbz2-1[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

cygbz2-1.dll
Size

63KB
MD5

72364e80e091abb483e139bfb6f490c5
SHA1

89c0e39b485eac95e66888f141f7ed2760f5d191
SHA256

9cfcfd899a749087161b17e7554b3a9af4314b0e1e76e173edb87b33153f402e
SHA512

d74877a44d6fc5580e01f4fd67ee8b0dbfe788d3534d25886d3b8a0852cf33e638d040caadeb466bc158384d1858f3c19893f319b19f99b8394a446d3172713c
SSDEEP

768:cRTT3vCfTJSCqHh82k9g8BMbeG499Y6hN0wXFN23AAgHYYYYYYYqYlUQ:O7CfTACqHGd9rOiG4dCwXX80s

Score

1^/10

Malware Config

Signatures

Files

cygbz2-1.dll
.dll windows x64

fc9cfb9c93677a18c652a4969d2efde8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

cygwin1

__cxa_atexit
__getreent
__locale_ctype_ptr
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fdopen
fflush
fgetc
fopen
fprintf
fputc
fread
free
fwrite
malloc
posix_memalign
realloc
ungetc

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

BZ2_blockSort
BZ2_bsInitWrite
BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bz__AssertH__fail
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite
BZ2_compressBlock
BZ2_crc32Table
BZ2_decompress
BZ2_hbAssignCodes
BZ2_hbCreateDecodeTables
BZ2_hbMakeCodeLengths
BZ2_indexIntoF
BZ2_rNums
__gcc_deregister_frame
__gcc_register_frame

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 464B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc9cfb9c93677a18c652a4969d2efde8

Headers

File Characteristics

Imports

cygwin1

kernel32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.buildid Size: 512B - Virtual size: 53B

.pdata Size: 1024B - Virtual size: 684B

.xdata Size: 1024B - Virtual size: 652B

.bss Size: - Virtual size: 464B

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 964B

.reloc Size: 512B - Virtual size: 68B

/4 Size: 512B - Virtual size: 24B

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.buildid
Size: 512B - Virtual size: 53B

.pdata
Size: 1024B - Virtual size: 684B

.xdata
Size: 1024B - Virtual size: 652B

.bss
Size: - Virtual size: 464B

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 964B

.reloc
Size: 512B - Virtual size: 68B

/4
Size: 512B - Virtual size: 24B