a2p[.]exe | Triage

Sharing

General

Target

a2p.exe
Size

109KB
MD5

2489e0e5554aa191d0f7a5e8f11c71ee
SHA1

a33f328739b98a3014f79e5282263c63cbe62f06
SHA256

d5b88409bf50ac031831cbc33fca1ddfd3e631576030331ae4c31a8706bff92f
SHA512

c737caddb7d36d5fda0728c068c2860ac1142647a8365667889c718311e4ff3bd64497d6f383792e79488e0b6e64a369c067cd1d0a0e0c541da37b5706a21fc0
SSDEEP

1536:dBASAkRNgv8cewxKl5CiX7rGqEmQC/rqV9EM+ciUd2DJukqqF+FaPwSPu/RpYPTq:3ASmtji+DSPu/0TRSVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2p.exe

Files

a2p.exe
.exe windows:4 windows x86 arch:x86

c2e64f2b3269f14e467ece9aa4d84f3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__main
abort
atoi
calloc
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fopen
fprintf
fputs
free
fwrite
getc
getenv
malloc
memcpy
printf
putc
putchar
puts
realloc
sprintf
strchr
strcmp
strcpy
strlen
strncmp
strncpy
vfprintf
vsnprintf

kernel32

GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_cy
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 203KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE