axel[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

axel.exe
Size

31KB
MD5

4eb7869a365cdc2a830a6b93185bb5ce
SHA1

55b2b48716fbbdad46f8fe82d513595e618e95fa
SHA256

12641ccf6b408d57aa84fea4866681880eb0a41c1ca01307c5aa4d68c286e57c
SHA512

ca5c4423e82c1cf9e8584ee2d19e2ba453658c242758d2f0c5120f0968e1ef6c6161f2296d376a6b45ac40e6842617abd793decd28e5a4a921c002d535fd2913
SSDEEP

768:+FoHWk90bJ08tn3v9r8+2uRnO6KPolJoHib4jXT2XCt38qHQXgJTJDdVEd:+Fc0bHtn/N8+FeQlp84w38KMi1x4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
axel.exe

Files

axel.exe
.exe windows:4 windows x86 arch:x86

7be7452542d366caf87878d0adb9ab1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__ctype_ptr__
__getreent
__main
_dll_crt0@0
_fopen64
_impure_ptr
_lseek64
_open64
_stat64
access
bind
calloc
close
connect
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fflush
fgetc
fprintf
fputs
free
fscanf
getenv
gethostbyname
getopt_long
getservbyname
gettimeofday
inet_addr
inet_ntoa
ioctl
malloc
memcpy
memset
optarg
opterr
optind
printf
pthread_cancel
pthread_create
pthread_join
pthread_setcancelstate
pthread_setcanceltype
putc
putchar
puts
qsort
read
realloc
scanf
select
signal
snprintf
socket
sprintf
sscanf
strcasecmp
strcat
strchr
strcmp
strcpy
strncat
strncmp
strncpy
strrchr
strstr
unlink
usleep
vsnprintf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE