33f92b13cf321ac489c921aa21b9132f556316067feb6c5e0761426a8bfd5873

Sharing

Copy URL

Twitter E-mail

General

Target

33f92b13cf321ac489c921aa21b9132f556316067feb6c5e0761426a8bfd5873
Size

28KB
MD5

fa4eb0a229b38f4eb77e696ba932d3b4
SHA1

826b0d568757bd9cf453aa6cadaa6e05c24c6a4c
SHA256

33f92b13cf321ac489c921aa21b9132f556316067feb6c5e0761426a8bfd5873
SHA512

8c1a85d4b7e4aac39ca33cf9aac4a28604583cc09d55713b2679949bb3fbb10ff4dcbb0e29057c58dfbf8aea35116adfa73701a16ad23a50d8f2cc958f169688
SSDEEP

768:ccQ2hanq1UFAWxG1cDr9Q/UhyG0crhor3QY3NAldu:I2QqySOoO9Q/UwG0c9o/9AlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33f92b13cf321ac489c921aa21b9132f556316067feb6c5e0761426a8bfd5873

Files

33f92b13cf321ac489c921aa21b9132f556316067feb6c5e0761426a8bfd5873
.dll windows:4 windows x86 arch:x86

b0f345cc544390a66a5a6258f14ad3e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

PDB Paths

Imports

msys-2.0

__cxa_atexit
__errno
__locale_ctype_ptr
__stack_chk_fail
__stack_chk_guard
_getpwuid32
_getuid32
_impure_ptr
_lstat64
_stat64
calloc
closedir
cygwin_internal
dll_dllcrt0
free
getenv
getpwnam
getpwuid
getuid
lstat
malloc
memchr
memcpy
memset
msys_detach_dll
opendir
posix_memalign
pthread_cond_signal
pthread_mutex_lock
pthread_mutex_unlock
qsort
readdir
realloc
stat
strcmp
strlcpy
strlen
tolower

msys-gcc_s-1

__emutls_get_address

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA

msys-perl5_38

PL_charclass
PL_env_mutex
Perl_av_push
Perl_av_shift
Perl_ck_warner
Perl_croak_nocontext
Perl_croak_sv
Perl_croak_xs_usage
Perl_get_hv
Perl_get_sv
Perl_gv_add_by_type
Perl_hv_common_key_len
Perl_markstack_grow
Perl_mg_get
Perl_more_bodies
Perl_more_sv
Perl_mro_method_changed_in
Perl_my_cxt_init
Perl_newCONSTSUB
Perl_newSV
Perl_newSViv
Perl_newSVpvf_nocontext
Perl_newSVpvn
Perl_newSVpvn_flags
Perl_newXS_deffile
Perl_safesysfree
Perl_safesysmalloc
Perl_safesysrealloc
Perl_stack_grow
Perl_sv_2iv_flags
Perl_sv_2mortal
Perl_sv_2pv_flags
Perl_sv_backoff
Perl_sv_catpvn_flags
Perl_sv_dup_inc
Perl_sv_free2
Perl_sv_magic
Perl_sv_newmortal
Perl_sv_setiv_mg
Perl_sv_setpvn
Perl_sv_upgrade
Perl_xs_boot_epilog
Perl_xs_handshake
__emutls_v.PL_current_context

Exports

Exports

__gcc_deregister_frame
__gcc_register_frame
_nm__PL_charclass
_nm__PL_env_mutex
_nm____emutls_v.PL_current_context
boot_File__Glob
bsd_glob
bsd_globfree
hmod_libgcc

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 280B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0f345cc544390a66a5a6258f14ad3e5

Headers

File Characteristics

PDB Paths

Imports

msys-2.0

msys-gcc_s-1

kernel32

msys-perl5_38

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 2KB - Virtual size: 1KB

.buildid Size: 512B - Virtual size: 53B

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 280B

.edata Size: 512B - Virtual size: 304B

.idata Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 620B

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 2KB - Virtual size: 1KB

.buildid
Size: 512B - Virtual size: 53B

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 280B

.edata
Size: 512B - Virtual size: 304B

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 620B