Public[.]DatabaseSettings[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Public.DatabaseSettings.exe
Size

214KB
MD5

237048fcb11dc12347c5e6cdac07ea5b
SHA1

04a0d07a5654dd9f0e7f79ea93097f297ffc951a
SHA256

2644b2eaf2b898aafc686de7aed3ebec4dabeafefdfe601f8ad3de15732fd342
SHA512

73a19e70ead792a886a6e4ef247fc5dc86f583d5fcba6a3f835157c0d18bccb63ccfdc04a13bd4f11abdfbbe50a7a006c0383d0b4f949ff5af4ee4db59d06781
SSDEEP

6144:I9ZQrYT48qfeEOUaMVvuJHLgVIPcN6nD2:ImvuJHLgVIE6D2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Public.DatabaseSettings.exe

Files

Public.DatabaseSettings.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ