110aa0f15a47468280d3e5cd44325741 | Triage

Sharing

General

Target

110aa0f15a47468280d3e5cd44325741
Size

293KB
MD5

110aa0f15a47468280d3e5cd44325741
SHA1

ada512c2b932beacb69554bbe0de53a88b9aa0c4
SHA256

34b0f7159acfca50f0c76fd815a96fbc8d6a5217296ec404f77594b7b6905bfa
SHA512

8619aa842f110ac5bf97b5dfedafad733e495690489f3d1b2a2a5cac2a45d6a9842526a919a161abc32d797931f695e862846ed9c49434a3febe80012a759ed1
SSDEEP

6144:yhOi56uSSrwzJ3MquRw4bD09REOYzxPIvOBYtdzd8WaPohzymXT9xQ:3i5XOWPmtnBTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
110aa0f15a47468280d3e5cd44325741

Files

110aa0f15a47468280d3e5cd44325741
.exe windows:4 windows x86 arch:x86

4d8eb933d39353e207327621f0d18c1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

calloc
dll_crt0__FP11per_process
dll_dllcrt0
dll_noncygwin_dllcrt0
fork
free
getpid
__main
malloc
perror
printf
realloc

kernel32

GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ