c08f0eab52af8450bdbea2723d75044e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c08f0eab52af8450bdbea2723d75044e
Size

250KB
MD5

c08f0eab52af8450bdbea2723d75044e
SHA1

5efbe210b9bfc751ea929dd549bd66573e2a7d4d
SHA256

e071c3d9fc7b3035c35a53c7509a142f4a48143aaef866028afa61b23272ce26
SHA512

f71f5998b4fd52231c710eab9737c9ee50269069c4c33da6f46bc8974dd9366a93c2c5a92e6dc94ca846bce2628552a252eefff50f17d026e4bc9b308dc1d008
SSDEEP

768:HhfF1EjjAihvL5DNpQPxPhyqVMK12B/ffmZ4XJMjZDJE+cO5OrjaSCBHb:HtaQPCKMB3uYqfn5Orm5Hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c08f0eab52af8450bdbea2723d75044e

Files

c08f0eab52af8450bdbea2723d75044e
.exe windows:4 windows x86 arch:x86

d30438bdad535893ce8df7d6adfe47ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_impure_ptr
abort
atexit
calloc
clock_gettime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
getenv
gettimeofday
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
nanosleep
printf
putc_unlocked
realloc
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
strtod
vfprintf

cygintl-8

libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

GetModuleHandleA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 560B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE