easy_Benign_ff83e280573dfcd9842116608b0be561b4328f5e7619e0f3bebac2a6dea2c34a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ff83e280573dfcd9842116608b0be561b4328f5e7619e0f3bebac2a6dea2c34a.exe
Size

11KB
MD5

618d6462e13e9be5df7d1bcaa1533433
SHA1

fdd35200cf3910013ca9120a2589101ab4ee7f10
SHA256

ff83e280573dfcd9842116608b0be561b4328f5e7619e0f3bebac2a6dea2c34a
SHA512

313e3d9c18750171530b8aeee4fc4f5479456cb9b470c9e4ea00fd69a6f04b9763aa617e979c7359e3269a4f7bdae29931c97f35498e41e836ee4f9639ee9900
SSDEEP

192:UUu2XST6sHeTuwSk0mjRY76ssss6666666666sWZC3XnkkpHjeCszO:U/F6sHej0246ssss6666666666sWwXnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ff83e280573dfcd9842116608b0be561b4328f5e7619e0f3bebac2a6dea2c34a.exe

Files

easy_Benign_ff83e280573dfcd9842116608b0be561b4328f5e7619e0f3bebac2a6dea2c34a.exe
.exe windows x86

95ba8d9a12ecf92fb3b870255f166f2d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__cxa_atexit
__errno
__getreent
__main
__stack_chk_guard
_dll_crt0@0
_impure_ptr
_open64
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fileno
fprintf
fputc
free
fwrite
getenv
getopt
malloc
memcmp
open
optarg
optind
posix_memalign
putchar
puts
realloc
strerror
tcgetattr
tcsetattr

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA

cygncursesw-10

_nc_rootname
curses_version
ncwrap_cur_term
setupterm
tigetstr
tputs
use_env
use_tioctl

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 356B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

95ba8d9a12ecf92fb3b870255f166f2d

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

kernel32

cygncursesw-10

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 1024B - Virtual size: 1024B

.buildid Size: 512B - Virtual size: 53B

/4 Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 356B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 1024B - Virtual size: 1024B

.buildid
Size: 512B - Virtual size: 53B

/4
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 356B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB