seq[.]exe | Triage

Sharing

General

Target

seq.exe
Size

23KB
MD5

245c351d61b3fa19b318a869ed716e62
SHA1

d8ab398788498568f9674f43b5bfe48b94276b74
SHA256

1b12b1aae35df312285f8c8862510c7ca0ccf3d609a0f93f8221253c6a61f474
SHA512

f3b1c415d1793201423a16018dd4851f08f1b18b102d7eef7dbe53ac9b85f8855a71561ae803bf63a8240407272f57a1eeedefe2e6b7d0cbc1e1eddce435e291
SSDEEP

384:gZJxnAO3x1pdzdFIy7FDg/aK0ozaeFdRVt1UqdaAjhVmo5BaOqQhyPhyqV5ZGFU+:QAWx10/3rdRVt1UqwGdBaOOPhyqVo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
seq.exe

Files

seq.exe
.exe windows:4 windows x86 arch:x86

133e8ea19c210656be81632a7103b040

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__errno
__main
_ctype_
abort
atexit
calloc
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
floor
fputs
free
getenv
localeconv
malloc
memcpy
memset
modf
putc
realloc
rint
setlocale
strchr
strcmp
strerror
strlen
strncmp
strspn
strtod
vsnprintf

msys-intl-8

__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_sprintf
libintl_textdomain
libintl_vfprintf

kernel32

GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_cy
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 876B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE