8a2a175bb4f60e79bf06aa866691c6e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a2a175bb4f60e79bf06aa866691c6e8
Size

29KB
MD5

8a2a175bb4f60e79bf06aa866691c6e8
SHA1

4e25cf08cc4fb5e0288f325eae9acf48ee39a437
SHA256

779240ec990aef6bfa857ba15ba5ed0b6d227a6a8ece511a7c1b3c01cd93154f
SHA512

f9bf126daf740aa6ba39afb05986ac83ccca5ce328eb25961e5b2251dcceb669125b45b777e102c6a3acfcb9e1a33599a69cc47f5948f83c2db0d1c1e36d1463
SSDEEP

384:KR6QKU6HeIWJOyK6wco8FcHtJ3RhSpqB/RBkcejF/PbQhyPhyqVlF1hXEhtvi1Uu:eKx+IW/pG3rSgB/RBkJjFPdPhyqVHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a2a175bb4f60e79bf06aa866691c6e8

Files

8a2a175bb4f60e79bf06aa866691c6e8
.exe windows:4 windows x86 arch:x86

c84bd4c9c5783521427682ecfc2e5c36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_impure_ptr
abort
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
fwrite
getenv
iswprint
malloc
mbrtowc
mbsinit
memcpy
mempcpy
memset
nl_langinfo
printf
putc_unlocked
putchar_unlocked
realloc
setlocale
sprintf
strchr
strcmp
strerror_r
strlen
strncmp
strtod
strtoimax
strtoumax
vfprintf

cygiconv-2

libiconv
libiconv_open

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetACP
GetModuleHandleA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 672B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE