ConnectionDBTigerHikvision[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ConnectionDBTigerHikvision.exe
Size

277KB
MD5

8b915bcc27bff933a247549f9d536995
SHA1

51520bb42de80da48299b89eb7207bb8794a0850
SHA256

b82caec7e1ab3e473a2c714cc031930b58a2dae56897a55013853b85b98c60ca
SHA512

32aa128fbd4928263b31f09ec41fd8a630871e3cd0dcd67f777015259f1966e32a6ac8915ebdcc8d4684fb9ceb9f1bb3f02ae7f1224b36200df19d80da70eb87
SSDEEP

3072:QxY1v6B6+dSrGXpKLCqcEjg0R4IsmPRfEtjpuiLw787DVqIzd8U9WYiGAKwbDhqu:QxYi7v8qQKwbDhq0jAYAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConnectionDBTigerHikvision.exe

Files

ConnectionDBTigerHikvision.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ