pinky[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pinky.exe
Size

27KB
MD5

054d5919a530332450d1fd1e30e93f74
SHA1

fea432b27c571892aeec73e64db3f3e079cc4d20
SHA256

98aed0dc8ee64b884a2557432016a1762b93cd27a87f0c76471c1ccd5d1d98f3
SHA512

2395afff77f6f1b6efcee17262062d3bcde947dad7c252f6fbab2e129ca2908cd300b3db7547897b0193939ca0e0642dcaaeee79daa966699a738c65441b8523
SSDEEP

768:8jBx7+T+grwqS+vCH+C1OwW2OOPhyqV29:8GSgrS+BwfO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pinky.exe

Files

pinky.exe
.exe windows:4 windows x86 arch:x86

85fd78a37382994fd655a96ea88a52ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__errno
__main
_ctype_
abort
atexit
calloc
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fopen
fputs
fread
free
fwrite
getenv
gethostbyname
getpwnam
getservbyname
kill
localtime
malloc
memcpy
memset
putc
realloc
setlocale
stat
strchr
strcmp
strcpy
strdup
strerror
strftime
strlen
strncmp
strncpy
time
vsnprintf

msys-intl-8

__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_sprintf
libintl_textdomain
libintl_vfprintf

kernel32

GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_cy
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 700B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE