SqlDbx_3[.]58_C[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SqlDbx_3.58_C.exe
Size

2.0MB
MD5

29f3820b036bf47c705218d8acf491f6
SHA1

f99a3fabddf939ee502a3b129467215782e25dd2
SHA256

5dcd42f2786e3e289a1fe00afafe34a1bdf4ba8d7bb3dc2555c9a8718216ed5e
SHA512

b9f0e8cfaa689b6e6bb16d14af0c0a58610b2dbb47a4ebf7fd32737ed4e7d43baf9bbfb4c9280aab86555d18b3503bb28435a54bfefe2ebeaff80af489884809
SSDEEP

49152:l4S3oMHDnYqWknWBTx5BMl9R5E+9/jPf3i:l4S3oMHjYqW9Nx5BMlZ9/jPPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SqlDbx_3.58_C.exe

Files

SqlDbx_3.58_C.exe
.exe windows x86

2ec662d2148860ddb48bc23c909ac803

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmIsIME
ImmGetContext

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

kernel32

GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapSize
SetStdHandle
GetFileType
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetStdHandle
LCMapStringA
LCMapStringW
HeapCreate
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetSystemTimeAsFileTime
GetProcessHeap
lstrlenA
CompareFileTime
GetFileAttributesExA
CreateFileA
CloseHandle
GetFileInformationByHandle
ReadFile
WideCharToMultiByte
lstrcpyA
lstrcatA
GetFileAttributesA
GetTempFileNameA
WriteFile
FindFirstFileA
DeleteFileA
MoveFileA
FindClose
OutputDebugStringA
GetComputerNameA
GetLocalTime
GetModuleFileNameA
GlobalLock
GlobalUnlock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GetDateFormatA
GetTimeFormatA
lstrcmpiA
SetLastError
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
VirtualFree
MultiByteToWideChar
MulDiv
GetTickCount
HeapReAlloc
CreateThread
ExitThread
HeapFree
VirtualQuery
GetSystemInfo
VirtualProtect
HeapAlloc
GetFileSizeEx
LocalFileTimeToFileTime
GetSystemDirectoryW
LoadLibraryW
GetShortPathNameA
GetVolumeInformationA
UnlockFile
LockFile
FlushFileBuffers
GetStringTypeExA
GetOEMCP
GetCPInfo
SystemTimeToFileTime
GetThreadLocale
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetModuleHandleW
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetFullPathNameA
GetFileTime
SetFileTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryExA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
GetModuleFileNameW
GlobalGetAtomNameA
lstrcmpW
GetCurrentProcessId
GetProfileIntA
GlobalSize
RaiseException
InterlockedExchange
LocalFree
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentDirectoryA
GetPrivateProfileStringA
LocalAlloc
FormatMessageA
FileTimeToSystemTime
GetLocaleInfoA
FindNextFileA
CreateDirectoryA
CopyFileA
SetFilePointer
SetEndOfFile
GetFileSize
InterlockedExchangeAdd
InterlockedDecrement
InterlockedIncrement
lstrcpynA
lstrcmpA
GlobalFree
TerminateProcess
GetExitCodeProcess
DuplicateHandle
GetCurrentProcess
lstrlenW
SearchPathA
GetEnvironmentVariableA
SetEnvironmentVariableA
VirtualAlloc
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventA
SetEvent
Sleep
ResetEvent
GetCurrentThreadId
WaitForSingleObject
SetErrorMode
CompareStringA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetVersion
FreeLibrary
FreeResource
CompareStringW

user32

PostQuitMessage
ShowOwnedPopups
UnregisterClassA
LockWindowUpdate
CopyAcceleratorTableA
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetWindowThreadProcessId
GetLastActivePopup
GetWindowTextLengthA
ScrollWindowEx
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
GetMenuStringA
IsZoomed
SetForegroundWindow
FindWindowA
GetDlgCtrlID
IsIconic
MessageBeep
CreateAcceleratorTableA
DrawFocusRect
MonitorFromPoint
SetWindowRgn
MoveWindow
ShowWindow
SetFocus
GetNextDlgTabItem
SetScrollInfo
DrawIconEx
DestroyWindow
GetClassInfoA
MessageBoxA
IsCharAlphaA
SetWindowTextA
GetDCEx
GetSysColorBrush
GetKeyNameTextA
MapVirtualKeyExA
SetParent
FrameRect
SetActiveWindow
GetActiveWindow
GetWindow
UnhookWindowsHookEx
SetWindowsHookExA
DispatchMessageA
GetMessageA
PeekMessageA
WindowFromPoint
CallNextHookEx
EnableMenuItem
GetClassLongA
IsChild
MenuItemFromPoint
CreateWindowExA
WaitMessage
BeginPaint
ValidateRect
DefWindowProcA
DrawMenuBar
SetMenu
SetPropA
CallWindowProcA
RemovePropA
GetPropA
SetWindowLongA
CreatePopupMenu
DeleteMenu
RemoveMenu
DrawEdge
RedrawWindow
IsRectEmpty
GetMenuState
LoadMenuA
GetDesktopWindow
InsertMenuA
ModifyMenuA
AppendMenuA
GetMenuDefaultItem
GetMessagePos
TabbedTextOutA
DrawTextExA
GrayStringA
DrawStateA
GetMenuItemID
GetSubMenu
RegisterWindowMessageA
GetSystemMenu
GetMenu
WindowFromDC
GetMenuInfo
DestroyIcon
GetIconInfo
CopyImage
FillRect
SystemParametersInfoA
GetMenuItemInfoA
GetMenuItemRect
SetMenuInfo
IsMenu
GetWindowDC
GetMenuItemCount
MonitorFromRect
GetMonitorInfoA
IntersectRect
SetRect
LoadImageA
GetCapture
DeferWindowPos
EnumChildWindows
EndDeferWindowPos
BeginDeferWindowPos
DrawIcon
DestroyCursor
TranslateMessage
CreateDialogIndirectParamA
EqualRect
GetWindowLongA
GetClassNameA
GetWindowTextA
IsWindowEnabled
DrawFrameControl
LoadIconA
GetWindowRect
GetDlgItem
InflateRect
CopyRect
UnionRect
LoadBitmapA
SetWindowPos
GetSystemMetrics
ClientToScreen
GetClipboardData
SetTimer
SetCapture
GetKeyState
CloseClipboard
EndDialog
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
InsertMenuItemA
BringWindowToTop
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
OpenClipboard
CheckMenuItem
WinHelpA
GetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
EndPaint
ScrollWindow
IsCharAlphaNumericA
SetRectEmpty
CharUpperA
CharLowerA
wsprintfA
SendMessageA
IsWindowVisible
IsClipboardFormatAvailable
GetAsyncKeyState
IsCharLowerA
GetClientRect
PtInRect
UpdateWindow
PostMessageA
CreateCaret
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
EnableWindow
GetFocus
InvalidateRect
GetSysColor
DrawTextA
OffsetRect
IsWindow
GetCaretPos
GetDC
ReleaseDC
EnableScrollBar
DestroyAcceleratorTable
GetCursorPos
ScreenToClient
SetCursor
LoadCursorA
LoadAcceleratorsA
TranslateAcceleratorA
GetKeyboardLayout
GetParent
ReleaseCapture
KillTimer

gdi32

GetPixel
SetPixel
GetCurrentObject
GetTextAlign
GetLayout
SetTextAlign
MoveToEx
GetTextExtentPointA
GetCurrentPositionEx
GetTextColor
CreatePatternBrush
CreateSolidBrush
SetWindowOrgEx
GetNearestColor
RoundRect
Escape
RectVisible
PtVisible
UnrealizeObject
SetBrushOrgEx
CreatePen
Rectangle
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
GetWindowOrgEx
EnumFontFamiliesA
CreateFontA
GetStockObject
PatBlt
GetClipBox
LineTo
Polygon
CreatePolygonRgn
LPtoDP
Polyline
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetStretchBltMode
RealizePalette
ExcludeClipRect
DeleteDC
GetViewportExtEx
GetWindowExtEx
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectPalette
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
SetRectRgn
GetMapMode
GetCharWidthA
StretchDIBits
GetBkColor
GetViewportOrgEx
CreateEllipticRgn
Ellipse
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
IntersectClipRect
CreateBitmap
CreateHalftonePalette
CreatePalette
GetDIBColorTable
SetBkMode
SetTextColor
TextOutA
CreateFontIndirectA
DPtoLP
GetDeviceCaps
GetObjectA
GetTextMetricsA
GetTextExtentPoint32A
GetTextExtentExPointA
ExtTextOutA
SetBkColor
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetMapMode
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

RegCreateKeyA
GetUserNameA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
IsTextUnicode

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ExtractIconA
SHGetFileInfoA
SHCreateDirectoryExA
ShellExecuteA
DragFinish
DragQueryFileA
DragAcceptFiles
SHGetFolderPathA
SHBrowseForFolderA

comctl32

ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryEmptyA
PathIsUNCA

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
DoDragDrop
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleUninitialize
OleInitialize
CreateBindCtx
GetRunningObjectTable
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleTranslateAccelerator

oleaut32

VarDateFromStr
SystemTimeToVariantTime
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SafeArrayCreate
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayGetDim
SysAllocStringLen
CreateErrorInfo
SysAllocString
VariantTimeToSystemTime

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 607KB - Virtual size: 606KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ec662d2148860ddb48bc23c909ac803

Headers

DLL Characteristics

File Characteristics

Imports

imm32

rpcrt4

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 289KB - Virtual size: 289KB

.data Size: 55KB - Virtual size: 72KB

.rsrc Size: 607KB - Virtual size: 606KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 289KB - Virtual size: 289KB

.data
Size: 55KB - Virtual size: 72KB

.rsrc
Size: 607KB - Virtual size: 606KB