sshpass[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

sshpass.exe
Size

15KB
MD5

5524f61f7d329666850fbd55f142de4d
SHA1

784bcfa24dc86fdbfd85c08772219b98a129f296
SHA256

823f6244e6c5dbc14f12469d3a67c43736e3d7f19cea73ce634fd4a65f379982
SHA512

b7d0c8f8cf7ad759338b70348efa176e9346f9b990a5cd565ed2878712fb01a228383c4dcc9beb65da987ebdf903011e00ef111dc003602cf2bcacbf83f610ea
SSDEEP

384:LtVC9RHo0BCN8J6ss6666666666stK0GwBYHnYzCW96:56t6ss6666666666sJhYHZWg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sshpass.exe

Files

sshpass.exe
.exe windows x86

624523c8737fbb8be05f06942e914ad4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__cxa_atexit
__getreent
__main
__stack_chk_fail
__stack_chk_guard
_dll_crt0@0
_fcntl64
_impure_ptr
_open64
atoi
calloc
close
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
execvp
exit
fcntl
fork
fprintf
free
fwrite
getenv
getopt
grantpt
ioctl
malloc
open
optarg
optind
perror
posix_memalign
posix_openpt
printf
pselect
ptsname
puts
read
realloc
setsid
sigaddset
sigemptyset
signal
sigprocmask
strdup
strlen
unlockpt
waitpid
write

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 308B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

624523c8737fbb8be05f06942e914ad4

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 3KB - Virtual size: 2KB

.buildid Size: 512B - Virtual size: 53B

/4 Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 308B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

/14 Size: 512B - Virtual size: 20B

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 3KB - Virtual size: 2KB

.buildid
Size: 512B - Virtual size: 53B

/4
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 308B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

/14
Size: 512B - Virtual size: 20B