8a690ecdff8d7c3b534e1ba2b5872e0ffa016e1a3504013d9a038bff161c81c6 | Triage

Sharing

General

Target

8a690ecdff8d7c3b534e1ba2b5872e0ffa016e1a3504013d9a038bff161c81c6
Size

1.8MB
MD5

9e9dff1dc22ef3fc0bc2db470896ccd8
SHA1

ce37558d6fb26cb0659c755869d6bd7c4b727cda
SHA256

8a690ecdff8d7c3b534e1ba2b5872e0ffa016e1a3504013d9a038bff161c81c6
SHA512

c729917c94632597adaa6d984ce4bd44ba07acab67e3ce3336f5c32d89404dd26cff763940a69be96ed2afd87480f00fdf44f897037c52e1da23fd0a6c6be3e9
SSDEEP

49152:uNIYjp45brQHqdXgAeIx2emw9OJiwx7Kg+DIMZiozlkB:uOY9VGxbmwM7KgIIe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a690ecdff8d7c3b534e1ba2b5872e0ffa016e1a3504013d9a038bff161c81c6

Files

8a690ecdff8d7c3b534e1ba2b5872e0ffa016e1a3504013d9a038bff161c81c6
.dll windows x86

5823679726658efb97b5f02b74cc24f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

winspool.drv

SetFormA

shell32

ShellExecuteA

comdlg32

PrintDlgA

common

getTierMode

common2

getDBKind

dbconnect

getADOConnection

wsock32

WSACleanup

plm

ConnPLM

Exports

Exports

CloseForm
StartForm

Sections

CODE
Size: 1.8MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE