2926c25541d5043298186482e9af8e7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2926c25541d5043298186482e9af8e7b
Size

139KB
MD5

2926c25541d5043298186482e9af8e7b
SHA1

12aa1adf9ec124f92a817b2f7e8c7f7514dc9fb5
SHA256

818a606d836ae8b992fd6ea7e95dae708a5d40b7eb85ccabae28809a44994c1b
SHA512

c56323138ab7941961c62d0f617cd5894297dd00ee914a5ff33501cce6fd79f029898fc8639921d356f99ea3e2a638bccd93ecddf775643a56aa2a66d2ced807
SSDEEP

3072:g6vPgm38nunfOwn12UrQBHRTx5/2Ih+NnixoqR3DdT2J7O:gCPZIundXo18IwFiiqR3JqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2926c25541d5043298186482e9af8e7b

Files

2926c25541d5043298186482e9af8e7b
.exe windows:4 windows x86 arch:x86

ee83ad8e93e8f9f96941fa443cf706da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
_ctype_
_fchown32
_fdopen64
_fopen64
_impure_ptr
_lstat64
_open64
_stat64
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fchmod
fclose
fflush
fgetc
fileno
fprintf
fputc
fread
free
fwrite
getenv
isatty
malloc
perror
realloc
remove
rewind
setmode
signal
strcat
strcmp
strcpy
strerror
strlen
strncpy
strstr
ungetc
utime

kernel32

GetModuleHandleA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE