d71f9bb246364916f0491f85a7129a33848eef3161e3826de5e6fc06a8b5e6e7N

General

Target

d71f9bb246364916f0491f85a7129a33848eef3161e3826de5e6fc06a8b5e6e7N
Size

583KB
MD5

1b854dc376c555f2d494ddbd7062b5e0
SHA1

1096405ae76ba9ee97e68a1dea12bcc3c0e9956c
SHA256

d71f9bb246364916f0491f85a7129a33848eef3161e3826de5e6fc06a8b5e6e7
SHA512

ad9e3170175c20b9ae78b64171ef2a9f742d4d0470055af9daa1d331faf6ded2cb202a4e2d1ed70a4e84150c6f4b5941c9b2d50c1b6a1e793a9f3136af9f363f
SSDEEP

12288:WXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:WsqjnhMgeiCl7G0nehbGZpbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d71f9bb246364916f0491f85a7129a33848eef3161e3826de5e6fc06a8b5e6e7N

Files

d71f9bb246364916f0491f85a7129a33848eef3161e3826de5e6fc06a8b5e6e7N
.exe windows:4 windows x86 arch:x86

fdb35ca01df655d0f31ac742e39c2ff9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__errno
__getreent
__main
_dll_crt0@0
_fopen64
_impure_ptr
abort
alarm
atoi
calloc
cygwin_create_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fflush
fgets
fprintf
fputc
fputs
free
getenv
ioctl
localtime
longjmp
malloc
mbtowc
memcpy
memmove
pause
printf
pthread_sigmask
read
realloc
setjmp
setlocale
signal
snprintf
strcmp
strcpy
strlen
strncmp
strncpy
system
time
toupper
usleep
vfprintf
vsnprintf
wctomb

cyggcc_s-1

__deregister_frame_info
__register_frame_info

kernel32

GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fdb35ca01df655d0f31ac742e39c2ff9

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

cyggcc_s-1

kernel32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 5KB

.idata Size: 568KB - Virtual size: 572KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 5KB

.idata
Size: 568KB - Virtual size: 572KB