48270ec7e81fac5efad4e1c44cc9b5bc

General

Target

48270ec7e81fac5efad4e1c44cc9b5bc
Size

446KB
MD5

48270ec7e81fac5efad4e1c44cc9b5bc
SHA1

30e402998e1e97cc55aa9ccb3712ed8de127169d
SHA256

328d8f61a3a810c946c63f930d02f2c6e2f181119efc505d1f41fe56c67c54d2
SHA512

6b71f7cfa9e3fcbbaf7a12ead8054d1791e58c423341c1e0f85409f275b74899ae7ed3a9c87b773bfe8388c501678e14578f2c9ef9c1c6eb6f3c3f3063b2d3ca
SSDEEP

6144:xRnwYfUhV0/9/OgfOk8u0fHPid3jRISvAedaUk4RXTbmSR5k6:xCYfkJKo4Ra6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48270ec7e81fac5efad4e1c44cc9b5bc

Files

48270ec7e81fac5efad4e1c44cc9b5bc
.exe windows:4 windows x86 arch:x86

e39c3897730c54ec3d66cd56379fe03f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__errno
__main
_ctype_
_exit
_fcntl64
_geteuid32
_getuid32
_open64
_stat64
abort
accept
atoi
atol
bind
calloc
close
connect
ctime
cygwin_internal
dll_crt0__FP11per_process
execl
exit
fork
free
gethostbyname
getpid
getppid
getsockname
inet_ntoa
listen
localtime
malloc
memcpy
memset
printf
pthread_atfork
puts
rand
read
realloc
recvfrom
select
sendto
setsid
setsockopt
signal
snprintf
socket
sprintf
srand
sscanf
strcasecmp
strchr
strcmp
strcpy
strerror
strlen
strncasecmp
strncpy
strpbrk
strstr
time
unlink
usleep
vsprintf
waitpid
write

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e39c3897730c54ec3d66cd56379fe03f

Headers

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 163KB - Virtual size: 163KB

.data Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 17KB

.idata Size: 2KB - Virtual size: 1KB

.stab Size: 192KB - Virtual size: 191KB

.stabstr Size: 46KB - Virtual size: 46KB

.text
Size: 163KB - Virtual size: 163KB

.data
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 17KB

.idata
Size: 2KB - Virtual size: 1KB

.stab
Size: 192KB - Virtual size: 191KB

.stabstr
Size: 46KB - Virtual size: 46KB