42ee6198d02e6822b64c24ffa16000a3

Sharing

Copy URL

Twitter E-mail

General

Target

42ee6198d02e6822b64c24ffa16000a3
Size

213KB
MD5

42ee6198d02e6822b64c24ffa16000a3
SHA1

e6dc71143dfdff12e65b8c6f3f0bec5c74af245b
SHA256

7f4089bf5ddc523a7a4da593d054b7daa705d33afc6f1d0c27fe901ff67cc561
SHA512

3d0389cb27240be5f07418edc2e4e3c85e1b8f64ca6df25b7616224afb553488f621c34cdda22fbc253855238c82760cab91d535742a8d82f23912e1056e98ac
SSDEEP

6144:C09ggKFTZmsc5z+yWHeHziaQUNG2wPGGB8xGbuunt:/9ggKF1mD5z+NciVSG2wPGGoGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ee6198d02e6822b64c24ffa16000a3

Files

42ee6198d02e6822b64c24ffa16000a3
.exe windows:4 windows x86 arch:x86

cae804205c7039b52c827ce397b47cc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_acl32
_ctype_
_exit
_fstat64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_stat64
_tzname
abort
access
atexit
btowc
calloc
chmod
clock_gettime
closedir
cygwin_internal
dirfd
dll_crt0__FP11per_process
exit
fchmod
fclose
fflush
fprintf
fputs
free
fwrite
getenv
getpwnam
gettimeofday
gmtime_r
ioctl
isatty
iswcntrl
iswctype
iswprint
localeconv
localtime
localtime_r
longjmp
malloc
mbrlen
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
opendir
printf
putc_unlocked
putchar_unlocked
qsort
raise
readdir
readlink
realloc
setjmp
setlocale
sigaction
sigaddset
sigemptyset
sigismember
signal
sigprocmask
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror_r
strftime
strlen
strncmp
strncpy
strndup
strrchr
strtoul
strtoumax
tcgetpgrp
towlower
tzset
vfprintf
wcscat
wcslen
wctype
wcwidth
wmemchr
wmemcpy

cygintl-8

libintl_bindtextdomain
libintl_dcgettext
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cae804205c7039b52c827ce397b47cc3

Headers

File Characteristics

Imports

cygwin1

cygintl-8

kernel32

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 1024B - Virtual size: 608B

.rdata Size: 17KB - Virtual size: 17KB

.bss Size: - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.data Size: 63KB - Virtual size: 128KB

.text Size: 46KB - Virtual size: 46KB

.bss Size: - Virtual size: 27KB

.data Size: 7KB - Virtual size: 7KB

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 1024B - Virtual size: 608B

.rdata
Size: 17KB - Virtual size: 17KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.data
Size: 63KB - Virtual size: 128KB

.text
Size: 46KB - Virtual size: 46KB

.bss
Size: - Virtual size: 27KB

.data
Size: 7KB - Virtual size: 7KB