easy_Benign_ff7f000434e7bc4cac09925ad13b541167e9a6c66d2473fa3a562bc9bdf9b3fc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ff7f000434e7bc4cac09925ad13b541167e9a6c66d2473fa3a562bc9bdf9b3fc.exe
Size

6KB
MD5

9fe86a9de6a715d292f9addafc0971a7
SHA1

ddad257a927aec514d3d7193b4c6774becc346be
SHA256

ff7f000434e7bc4cac09925ad13b541167e9a6c66d2473fa3a562bc9bdf9b3fc
SHA512

44395b1452319f19167b84385f6d9346a1d5d35a04bbf525ac3d974305aa8bc8daf4f9dd501b2bc5983e509deca1e5cc759b56a6adcc3f603fb00446316ecace
SSDEEP

96:cllQzgNxSJObAAdPtwBUoAN50kzup+iqRiNEtd:0WzgbSJOMAptSUoAN50kzup8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ff7f000434e7bc4cac09925ad13b541167e9a6c66d2473fa3a562bc9bdf9b3fc.exe

Files

easy_Benign_ff7f000434e7bc4cac09925ad13b541167e9a6c66d2473fa3a562bc9bdf9b3fc.exe
.exe windows x86

8cfdbfe85e8c19870a22b82a2b0b8ebc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

db2app

sqlfxdb@16
sqleisig_api@4
sqlfudb@16

db2sys

sqlotolower
?sqlrxa2l@@YAHPAEHPAJ@Z
sqloinca

msvcrt

exit
_exit
_XcptFilter
printf
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ