fc74c588bb7b7cba38690f251c43af57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc74c588bb7b7cba38690f251c43af57
Size

51KB
MD5

fc74c588bb7b7cba38690f251c43af57
SHA1

3244980ec72d6ce973b99261ed9af117a766cceb
SHA256

57ecf8435133ad3995819668a61c11028908cf0de8ac1c4b79f093d5aa329eef
SHA512

1d8def5fb2233aaa638f9d5cef3b106dc2898e5c0723add3979914c1a4ff973d482e6769de22a1b32f4eaa3e789fe88aa31e1c4c94361f5db1e492af6b640751
SSDEEP

768:TmTTIRWFXXsG9RA1osnOADVe61rguZWFZADVe61rguRhADVe61rgu8:TmTTIQJ8G9RA9OAD8s2ZAD8chAD8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc74c588bb7b7cba38690f251c43af57

Files

fc74c588bb7b7cba38690f251c43af57
.exe windows:4 windows x86 arch:x86

5637986857545f17c3efd8b952639ca1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__errno
__main
_ctype_
bsearch
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fgets
fopen
fprintf
fputs
free
fstat
getcwd
getenv
malloc
memcpy
open
printf
putc
puts
qsort
read
realloc
setlocale
sleep
strcasecmp
strchr
strcmp
strdup
strerror
strncmp
vfprintf

kernel32

GetModuleHandleA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 972B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 34KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE