73fa8441b641c6fd6ce58f1b3b9ea316 | Triage

Sharing

General

Target

73fa8441b641c6fd6ce58f1b3b9ea316
Size

22KB
MD5

73fa8441b641c6fd6ce58f1b3b9ea316
SHA1

434b3c50023a96ae76e95feac9d1af8119ab7af5
SHA256

281a3111de4473063ec9aa48ccd069efcdf8d7de470e4ade82c9c7a462cd41bb
SHA512

845e703065abb967bb3132475a2eed09eebf0aed352849f2d7df26d77c19d48792390bad035f59a4f9eefb112a5696d22134b3e0636da16ee875c7063ea3ea47
SSDEEP

384:c5bqbEjc+DFais8L1oRWpCVtLVLXwbpzAna4jymWQIWsRCFHXKK:wbNjnZoRffLVLmcuQHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73fa8441b641c6fd6ce58f1b3b9ea316

Files

73fa8441b641c6fd6ce58f1b3b9ea316
.exe windows:4 windows x86 arch:x86

023e1cb8e6ae0c2bd2a3de7e852d9f34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__getreent
__main
_impure_ptr
abort
calloc
cygwin_internal
dll_crt0__FP11per_process
fprintf
free
getopt_long
isdigit
localtime
malloc
mktime
optind
printf
pthread_atfork
realloc
sleep
sprintf
strcasecmp
strchr
strcpy
strlen
strrchr
strtol
time

kernel32

AddAtomA
FindAtomA
FormatMessageA
GetAtomNameA
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SetSystemPowerState

user32

ExitWindowsEx

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE