be7c1309d148573ee26c92a41cfa8d11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be7c1309d148573ee26c92a41cfa8d11
Size

87KB
MD5

be7c1309d148573ee26c92a41cfa8d11
SHA1

a8ef9932d2a590dda7a17812e3f14f6064cdb4d5
SHA256

4fd68247c990f409ae172e87906355e32049773d0df910638d66a8c6d096d364
SHA512

615bd7e4e7d5bf911a4615c3a21f681759aefbbdebde884cf9a4f0b2208db8abd86c29e47147167d658102ff33caea9be82b76ec0d7b211e794fcbe5055a6d3c
SSDEEP

1536:n66SpNg//m8+s838moS1XLngQ/mLwOw085T2UrQBa6f:n6vPgm38nunfOwn12UrQBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be7c1309d148573ee26c92a41cfa8d11

Files

be7c1309d148573ee26c92a41cfa8d11
.exe windows:4 windows x86 arch:x86

ee83ad8e93e8f9f96941fa443cf706da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
_ctype_
_fchown32
_fdopen64
_fopen64
_impure_ptr
_lstat64
_open64
_stat64
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fchmod
fclose
fflush
fgetc
fileno
fprintf
fputc
fread
free
fwrite
getenv
isatty
malloc
perror
realloc
remove
rewind
setmode
signal
strcat
strcmp
strcpy
strerror
strlen
strncpy
strstr
ungetc
utime

kernel32

GetModuleHandleA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE