5173bd49ed66282abd0b83e91d41a0ca1ab9c3aa3d2b94e86e67dd54014ee206N

Sharing

Copy URL Twitter E-mail

General

Target

5173bd49ed66282abd0b83e91d41a0ca1ab9c3aa3d2b94e86e67dd54014ee206N
Size

587KB
MD5

e4e8578e670405c0311351d261b4b450
SHA1

3eacac1597ad17858f43c62a1381827e25a5b122
SHA256

5173bd49ed66282abd0b83e91d41a0ca1ab9c3aa3d2b94e86e67dd54014ee206
SHA512

f9847a8a3c3d5157fa1aae157fd9daae7ce41adf4f65c037a349c5346a9736f9cb810f773b839c2037f97633244d63d88d2f548c8ea04513a39f5a5cee4cff49
SSDEEP

12288:Gn/hXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:mhsqjnhMgeiCl7G0nehbGZpbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5173bd49ed66282abd0b83e91d41a0ca1ab9c3aa3d2b94e86e67dd54014ee206N

Files

5173bd49ed66282abd0b83e91d41a0ca1ab9c3aa3d2b94e86e67dd54014ee206N
.exe windows:4 windows x86 arch:x86

e079c7b69f86165e716bbe4e8eba3c21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

__getreent
__main
_dll_crt0@0
_impure_ptr
calloc
cos
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fflush
free
getenv
gettimeofday
malloc
posix_memalign
printf
puts
realloc
sin
sqrt
strcmp
strlen
strstr
strtod

cyggl-1

glBegin
glCallList
glClear
glDeleteLists
glDrawBuffer
glEnable
glEnd
glEndList
glFinish
glFrustum
glGenLists
glGetString
glLightfv
glLoadIdentity
glMaterialfv
glMatrixMode
glNewList
glNormal3f
glPopMatrix
glPushMatrix
glRotatef
glShadeModel
glTranslated
glTranslatef
glVertex3f
glViewport
glXChooseVisual
glXCreateContext
glXDestroyContext
glXGetProcAddressARB
glXIsDirect
glXMakeCurrent
glXQueryDrawable
glXQueryExtensionsString
glXSwapBuffers

cygx11-6

XChangeProperty
XCloseDisplay
XCreateColormap
XCreateWindow
XDestroyWindow
XFree
XInternAtom
XLookupKeysym
XLookupString
XMapWindow
XNextEvent
XOpenDisplay
XParseGeometry
XPending
XSetNormalHints
XSetStandardProperties

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 308B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e079c7b69f86165e716bbe4e8eba3c21

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

cyggl-1

cygx11-6

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 132B

.rdata Size: 2KB - Virtual size: 1KB

/4 Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 308B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

/14 Size: 568KB - Virtual size: 572KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 132B

.rdata
Size: 2KB - Virtual size: 1KB

/4
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 308B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

/14
Size: 568KB - Virtual size: 572KB