touch[.]exe | Triage

Sharing

General

Target

touch.exe
Size

44KB
MD5

fbcc6c31e5c5a0d076ac2cbe3168cfb8
SHA1

e6ab4a3d614b2c46ac8e8fbeb5bcafca2ad1889a
SHA256

4c1eaefde1f8857d00e194c6b8e6acfb59c53bd12d3348371ee1d107d9f73716
SHA512

7f019d44f90b49bdb006649b58acc169c467884deeb4f10ad0e87499ab19199bc5355f7fd96141fbb49ff684199279b8bfd59ad482b856118df99db897c93e38
SSDEEP

768:uwm7BFpUWV3OBB+H0hyWOSnCVGQAKnVY/2A/JkPxBYwOQqu0dNBOnPhyqVziSH9:u1/pUWV3OBB+HkynSnCg8+2O9whiNBOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
touch.exe

Files

touch.exe
.exe windows:4 windows x86 arch:x86

e2fc3750c5f3043cc8b1e04c6ee79635

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__errno
__main
_ctype_
_tzname
abort
asctime
atexit
calloc
close
ctime
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fcntl
fflush
fputs
free
fstat
fsync
getenv
gettimeofday
gmtime
localtime
malloc
memcpy
memset
open
putc
realloc
setenv
setlocale
sprintf
stat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strtol
time
unsetenv
utime
vsnprintf

msys-intl-8

__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_textdomain
libintl_vfprintf

kernel32

GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_cy
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 652B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE