md5sum[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

md5sum.exe
Size

27KB
MD5

06707b6fff48aa962d4865ba033846e2
SHA1

edb383925354c79cbbcedd985064e7f256fc49fe
SHA256

19cc96a4332bfb732dcf03c08a9523d5cb6505bc5f5a392e801f9b997ecc96bc
SHA512

e2a40c5f9e4d7ed322e51331b83ab8ed1cf61b0fe9263c21fdc3ac21001deffd0ceab3031a578d0a4f000cd575fc2819eae2426f346f750cd3008bfc9cf3a257
SSDEEP

384:AsZ7VErRGKRrwNZn8o8Qp2SpeEL7jVwZzGiSqWC/EiVOeOXO+1E0LSPz1sKzs9/:HL0GKBwX8DQp2SpeG/2BGHnSFQdOuSs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
md5sum.exe

Files

md5sum.exe
.exe windows x86

74dfe5058611c7bdd5067483cd452676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fstat
_getcwd
_isatty
_open
_read
_close
_strdup
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
atexit
bsearch
calloc
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputs
fread
free
getc
getenv
isalnum
isalpha
isdigit
isspace
__p__environ
isxdigit
malloc
memcpy
printf
putc
putchar
puts
qsort
realloc
setlocale
signal
strchr
strcmp
strerror
strncmp
tolower
vfprintf
__set_app_type

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE