acd65d15d8feeaff00a33a5de40e172f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd65d15d8feeaff00a33a5de40e172f
Size

89KB
MD5

acd65d15d8feeaff00a33a5de40e172f
SHA1

cacfb4406882591126953c598a84e061e1b250c6
SHA256

3c1264ad0e7206fb500289f7412fff468599777083f91bc261666bcc79ccffe6
SHA512

bbeddac863dc2fc8b6d695cc07ba8f055c85639f2293d5a3d111805f15e20398104f2df8f82af0a1d11ad7eb5bf6731852af8c245973be5e581d033aafa6015a
SSDEEP

384:gWOV9XWxlwpXf+qLwcB/RBoNDQ0DGXQ87PbQhyPhyqVwlfC1X29tg:NOzGxxqLrB/RBrwAQ87PdPhyqVwly2A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acd65d15d8feeaff00a33a5de40e172f

Files

acd65d15d8feeaff00a33a5de40e172f
.exe windows:4 windows x86 arch:x86

faa29374b78143a43b7dbffaed181183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_fopen64
_impure_ptr
abort
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
fwrite
getc_unlocked
getenv
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
printf
putc_unlocked
putchar_unlocked
realloc
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
strndup
strspn
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 720B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE