5766dc3ab71f94fcd28b99c10914b8a2 | Triage

Sharing

General

Target

5766dc3ab71f94fcd28b99c10914b8a2
Size

41KB
MD5

5766dc3ab71f94fcd28b99c10914b8a2
SHA1

9b24d249bfc4eb34854c8cef4cec32edee1e1f8a
SHA256

f667fdb371bbee560b6252581fc31b7ce3f5edca0dc3d0573cc925ab3aee0048
SHA512

11064b22165ea416cc8615a8a6940f9a4d5e6046e91213761ff026df3463b91f688121b486f1888d65a89aabaefc7ea1a921ddc6cd3ade09da430f0af5620126
SSDEEP

768:sHT5Y9MbPgU253BDU2eSWeZGzF/FNFzFzFyFwF1FJjnFN6FcF0YSvqe:sHyMbPgU253B3WfzdzJZgKDnmq0qe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5766dc3ab71f94fcd28b99c10914b8a2

Files

5766dc3ab71f94fcd28b99c10914b8a2
.exe windows:4 windows x86 arch:x86

5c3f1136573e26a9c0094c85ea5c4850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Imports

cygwin1

__main
__progname
atoi
bzero
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
exit
fflush
fprintf
free
gethostbyname
htons
malloc
memset
read
realloc
recv
select
send
sleep
snprintf
socket
strcmp
strlen
strncmp
strncpy
strstr
strtoul
vfprintf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 276B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ