DBConfig[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DBConfig.exe
Size

36KB
MD5

a8feff35825908f04a1ce9f90d95fe73
SHA1

4646c9f6ac58e772784738926e559b81ebe89252
SHA256

ed271174b222be52cd732bfa88de5eb3bff793ad5ebd24b41afece4cae86e1a2
SHA512

e39a391af55e9c5aa5ff91acd3ad6c6e468b01ab092d4fe35253ed252b4d2453b341c2d25b7afdf5832824028330af8e86a7ec7425bd6d034b8b386cf3c7cf84
SSDEEP

384:1mecIxhJzGBkXM+vLX0Js5z6/8v1Ks76ENHcq1zokA17/XPfImqsLkuC6lL6aAeJ:12mvGPlfVkulPOvBFHdlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DBConfig.exe

Files

DBConfig.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ