36a2ca3cdf30dbdd672bc1dcb20f616dd1a912e9f9e3cf3d149db0e35abb9752 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36a2ca3cdf30dbdd672bc1dcb20f616dd1a912e9f9e3cf3d149db0e35abb9752
Size

25KB
MD5

51c24cb6dbafedc47124445d1d713795
SHA1

03b1815c44fe320af755c4e538c28e6e5dd8dfe7
SHA256

36a2ca3cdf30dbdd672bc1dcb20f616dd1a912e9f9e3cf3d149db0e35abb9752
SHA512

53ecb47b793dadad89ff79332e9dd487b7938d1f57f7ad866e685c5ddb2194d69250d55fdf89858d5d975f91c4610341595d5937ec1f67b5b76a0025eac2b7ae
SSDEEP

384:fbOBgHWsH0kr8jsZEHEB8xsoMQPPO0fLLczZoO4A:TmjkBKso5LL8dF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a2ca3cdf30dbdd672bc1dcb20f616dd1a912e9f9e3cf3d149db0e35abb9752

Files

36a2ca3cdf30dbdd672bc1dcb20f616dd1a912e9f9e3cf3d149db0e35abb9752
.exe windows:4 windows x86 arch:x86

073e3aad5a100bc7b908bbd7acf950c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__main
abort
atoi
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
exit
free
htons
inet_addr
malloc
memcpy
memset
perror
printf
pthread_mutex_lock
pthread_mutex_unlock
read
realloc
recv
select
send
sleep
socket
strlen
strtoul
write

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE