fd289a8c486ec996f920d3a45da71cd4 | Triage

Sharing

General

Target

fd289a8c486ec996f920d3a45da71cd4
Size

69KB
MD5

fd289a8c486ec996f920d3a45da71cd4
SHA1

f5d0df265f4a8c875ebb6eff68721f568e9aeebc
SHA256

02a72736bb48c79b9d6239cb7f98edb958341d5839fd1ea993bdf5e3ec8a4e7d
SHA512

84660cba0a882942532252e7812ab1c063d235c5badd9189dfa76383de356d73b6ee7c1261939680d99f90c34004604e8d9de5774dd3fafe521a802ee6e20af4
SSDEEP

1536:9AW0pwmaOUUcNeD4sTd/z3/QXSxzJgqOW2+12r/LaHu8a4:9f0mHLUFd/sXYJlOW3Qr/LaV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd289a8c486ec996f920d3a45da71cd4

Files

fd289a8c486ec996f920d3a45da71cd4
.exe windows:4 windows x86 arch:x86

133e8ea19c210656be81632a7103b040

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__errno
__main
_ctype_
abort
atexit
calloc
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
floor
fputs
free
getenv
localeconv
malloc
memcpy
memset
modf
putc
realloc
rint
setlocale
strchr
strcmp
strerror
strlen
strncmp
strspn
strtod
vsnprintf

msys-intl-8

__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_sprintf
libintl_textdomain
libintl_vfprintf

kernel32

GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_cy
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 876B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE