SqlDbx_3[.]60[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SqlDbx_3.60.exe
Size

2.1MB
MD5

9090ff4151513a3ab944997b5404748b
SHA1

dbf2a21ef689b94ed1ff12b26108ddef6e8278b5
SHA256

e37437f0860e7ad623699b934f3fdebb9e40a9d28ea7b0490ecca20ba53e1066
SHA512

8a179f33ccdf1ef47ae150c93d1238d93910548daf66c17ce62cbeb5a006d38326c67c8a536c25b39c220cdf397b58eca5e6b8aa6e26b7a714e5a4537c63133d
SSDEEP

49152:bLf8/660kncOdSQWRqemuqC9/MQ+3I3n3V:bLf8/OkncOzWRqe59//V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SqlDbx_3.60.exe

Files

SqlDbx_3.60.exe
.exe windows x86

8ecebc7d01698c49993ab113730770f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmIsIME
ImmGetContext

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

kernel32

GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapSize
SetStdHandle
GetFileType
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetStdHandle
LCMapStringA
LCMapStringW
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapReAlloc
GetProcessHeap
lstrlenA
CompareFileTime
GetFileAttributesExA
CreateFileA
CloseHandle
GetFileInformationByHandle
ReadFile
WideCharToMultiByte
lstrcpyA
lstrcatA
GetFileAttributesA
GetTempPathA
GetTempFileNameA
WriteFile
DeleteFileA
MoveFileA
FindClose
OutputDebugStringA
GetComputerNameA
GetLocalTime
GetModuleFileNameA
GlobalLock
GlobalUnlock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GetDateFormatA
GetTimeFormatA
lstrcmpiA
SetLastError
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
VirtualFree
MulDiv
GetTickCount
CreateThread
ExitThread
HeapFree
VirtualQuery
GetSystemInfo
VirtualProtect
HeapAlloc
GetFileSizeEx
LocalFileTimeToFileTime
GetSystemDirectoryW
LoadLibraryW
GetShortPathNameA
GetVolumeInformationA
UnlockFile
LockFile
FlushFileBuffers
GetStringTypeExA
GetOEMCP
GetCPInfo
SystemTimeToFileTime
GetThreadLocale
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetModuleHandleW
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetFullPathNameA
GetFileTime
SetFileTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryExA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
GetModuleFileNameW
GlobalGetAtomNameA
lstrcmpW
GetCurrentProcessId
GetProfileIntA
GlobalSize
RaiseException
InterlockedExchange
LocalFree
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentDirectoryA
GetPrivateProfileStringA
LocalAlloc
FileTimeToSystemTime
GetLocaleInfoA
FindNextFileA
FindFirstFileA
CopyFileA
SetFilePointer
SetEndOfFile
GetFileSize
InterlockedExchangeAdd
InterlockedDecrement
InterlockedIncrement
lstrcpynA
lstrcmpA
FormatMessageA
GlobalFree
TerminateProcess
GetExitCodeProcess
DuplicateHandle
GetCurrentProcess
lstrlenW
SearchPathA
GetEnvironmentVariableA
SetEnvironmentVariableA
VirtualAlloc
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventA
SetEvent
Sleep
ResetEvent
GetCurrentThreadId
WaitForSingleObject
SetErrorMode
CompareStringA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetVersion
FreeLibrary
FreeResource
CompareStringW

user32

PostQuitMessage
ShowOwnedPopups
UnregisterClassA
LockWindowUpdate
CopyAcceleratorTableA
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetWindowThreadProcessId
GetLastActivePopup
GetWindowTextLengthA
ScrollWindowEx
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
GetMenuStringA
SetForegroundWindow
FindWindowA
GetDlgCtrlID
IsIconic
MessageBeep
CreateAcceleratorTableA
DrawFocusRect
CheckMenuItem
MonitorFromPoint
SetWindowRgn
MoveWindow
ShowWindow
SetFocus
GetNextDlgTabItem
SetScrollInfo
DrawIconEx
DestroyWindow
GetClassInfoA
MessageBoxA
IsCharAlphaA
SetWindowTextA
GetDCEx
GetSysColorBrush
GetKeyNameTextA
MapVirtualKeyExA
SetParent
FrameRect
SetActiveWindow
GetActiveWindow
GetWindow
UnhookWindowsHookEx
SetWindowsHookExA
DispatchMessageA
GetMessageA
PeekMessageA
WindowFromPoint
CallNextHookEx
EnableMenuItem
GetClassLongA
IsChild
MenuItemFromPoint
CreateWindowExA
WaitMessage
BeginPaint
ValidateRect
DefWindowProcA
DrawMenuBar
SetMenu
SetPropA
CallWindowProcA
RemovePropA
GetPropA
SetWindowLongA
CreatePopupMenu
DeleteMenu
RemoveMenu
DrawEdge
RedrawWindow
IsRectEmpty
GetMenuState
LoadMenuA
GetDesktopWindow
InsertMenuA
ModifyMenuA
AppendMenuA
GetMenuDefaultItem
GetMessagePos
TabbedTextOutA
DrawTextExA
GrayStringA
DrawStateA
GetMenuItemID
GetSubMenu
RegisterWindowMessageA
GetSystemMenu
GetMenu
WindowFromDC
GetMenuInfo
DestroyIcon
GetIconInfo
CopyImage
FillRect
SystemParametersInfoA
GetMenuItemInfoA
GetMenuItemRect
SetMenuInfo
IsMenu
GetWindowDC
GetMenuItemCount
MonitorFromRect
GetMonitorInfoA
IntersectRect
SetRect
LoadImageA
GetCapture
DeferWindowPos
EnumChildWindows
EndDeferWindowPos
BeginDeferWindowPos
DrawIcon
DestroyCursor
TranslateMessage
IsZoomed
CreateDialogIndirectParamA
EqualRect
GetWindowLongA
GetClassNameA
GetWindowTextA
IsWindowEnabled
DrawFrameControl
LoadIconA
GetWindowRect
GetDlgItem
InflateRect
CopyRect
UnionRect
LoadBitmapA
SetWindowPos
GetSystemMetrics
ClientToScreen
GetClipboardData
SetTimer
SetCapture
GetKeyState
CloseClipboard
EndDialog
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
InsertMenuItemA
BringWindowToTop
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
OpenClipboard
WinHelpA
GetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
ScrollWindow
EndPaint
IsCharAlphaNumericA
SetRectEmpty
CharUpperA
CharLowerA
wsprintfA
SendMessageA
IsWindowVisible
IsClipboardFormatAvailable
GetAsyncKeyState
IsCharLowerA
GetClientRect
PtInRect
UpdateWindow
PostMessageA
CreateCaret
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
EnableWindow
GetFocus
InvalidateRect
GetSysColor
DrawTextA
OffsetRect
IsWindow
GetCaretPos
GetDC
ReleaseDC
EnableScrollBar
DestroyAcceleratorTable
GetCursorPos
ScreenToClient
SetCursor
LoadCursorA
LoadAcceleratorsA
TranslateAcceleratorA
GetKeyboardLayout
GetParent
ReleaseCapture
KillTimer

gdi32

GetPixel
SetPixel
GetCurrentObject
GetTextAlign
GetLayout
SetTextAlign
MoveToEx
GetTextExtentPointA
GetCurrentPositionEx
GetTextColor
CreatePatternBrush
CreateSolidBrush
SetWindowOrgEx
GetNearestColor
RoundRect
Escape
RectVisible
PtVisible
UnrealizeObject
SetBrushOrgEx
CreatePen
Rectangle
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
GetWindowOrgEx
EnumFontFamiliesA
CreateFontA
GetStockObject
PatBlt
GetClipBox
LineTo
Polygon
CreatePolygonRgn
LPtoDP
Polyline
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetStretchBltMode
RealizePalette
ExcludeClipRect
DeleteDC
GetViewportExtEx
GetWindowExtEx
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectPalette
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
SetRectRgn
GetMapMode
GetCharWidthA
StretchDIBits
GetBkColor
GetViewportOrgEx
CreateEllipticRgn
Ellipse
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
IntersectClipRect
CreateBitmap
CreateHalftonePalette
CreatePalette
GetDIBColorTable
SetBkMode
SetTextColor
TextOutA
CreateFontIndirectA
DPtoLP
GetDeviceCaps
GetObjectA
GetTextMetricsA
GetTextExtentPoint32A
GetTextExtentExPointA
ExtTextOutA
SetBkColor
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetMapMode
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

RegCreateKeyA
GetUserNameA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
IsTextUnicode

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ExtractIconA
SHGetFileInfoA
ShellExecuteA
DragFinish
DragQueryFileA
DragAcceptFiles
SHCreateDirectoryExA
SHGetFolderPathA
SHBrowseForFolderA

comctl32

ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryEmptyA
PathIsUNCA

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
DoDragDrop
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleUninitialize
OleInitialize
CreateBindCtx
GetRunningObjectTable
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleTranslateAccelerator

oleaut32

VarDateFromStr
SystemTimeToVariantTime
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SafeArrayCreate
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayGetDim
SysAllocStringLen
CreateErrorInfo
SysAllocString
VariantTimeToSystemTime

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 762KB - Virtual size: 762KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ecebc7d01698c49993ab113730770f0

Headers

DLL Characteristics

File Characteristics

Imports

imm32

rpcrt4

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 290KB - Virtual size: 290KB

.data Size: 55KB - Virtual size: 72KB

.rsrc Size: 762KB - Virtual size: 762KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 290KB - Virtual size: 290KB

.data
Size: 55KB - Virtual size: 72KB

.rsrc
Size: 762KB - Virtual size: 762KB