1940bb1cd35cfe5e06474f4e2be3aaee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1940bb1cd35cfe5e06474f4e2be3aaee
Size

13KB
MD5

1940bb1cd35cfe5e06474f4e2be3aaee
SHA1

685159a9fc76141fad4cb230a322dcdfd398603e
SHA256

54a79af4de6a69bb45c791ad5973423a52282f01b4863e35d5798a6ac44821c8
SHA512

6548da1cdb438a859b3ce32c3073803f017b1c12c8fb13843fb663e321d10d1cbce83eec4d97862109fb2a65cdc806af7cc8b6c42270565d61a6c1d573b6beba
SSDEEP

384:KR2/q3qqDZmf8GW/Y5TemN3APJP6Ua2A9pXjmWMkFJT:dqr5AWspKWMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1940bb1cd35cfe5e06474f4e2be3aaee

Files

1940bb1cd35cfe5e06474f4e2be3aaee
.exe windows:4 windows x86 arch:x86

f0ff032579213bc300ef7f7e5c8cd076

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Imports

cygwin1

__main
__progname
_ctype_
alarm
atoi
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
getenv
gethostbyname
htons
inet_addr
localtime
malloc
memcpy
memset
printf
read
realloc
select
signal
sleep
socket
sscanf
strdup
strftime
strlen
strncmp
strstr
time
vfprintf
vsnprintf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 100B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ