1020ecf93ca3b7dc495167fd38c3c42aa44c6bf5980c2ad0a4fa191114dedbdd

General

Target

1020ecf93ca3b7dc495167fd38c3c42aa44c6bf5980c2ad0a4fa191114dedbdd
Size

19KB
MD5

f0d941a04f83c137e0938e0c7efd6428
SHA1

d1c63159e9612b96d4a5c8c9eb5d162cd6b5367d
SHA256

1020ecf93ca3b7dc495167fd38c3c42aa44c6bf5980c2ad0a4fa191114dedbdd
SHA512

b766dfc84276761d886657abf6d2ba6881b6362337bdcb9a3367e14adedbcc895b676e677920f0939a8fa571d3b50f921a21bea8c7f0a9a4d87d997aab069a56
SSDEEP

384:rKawZ9Hvgpi6NviI9q1eSalz8T1WpFNW:5wZtvL6BiIealYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1020ecf93ca3b7dc495167fd38c3c42aa44c6bf5980c2ad0a4fa191114dedbdd

Files

1020ecf93ca3b7dc495167fd38c3c42aa44c6bf5980c2ad0a4fa191114dedbdd
.exe windows x86

e4afd517b72b351a60df3a5e738b2f41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

sqlunirl

_MessageBox@16
_GetUnicodeRedirectionLayer@0
_FormatMessage@28

sqlresld

SQLUILoadResourceDLL
SQLUIUnloadResourceDLL

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
LocalFree
GetLastError
MultiByteToWideChar
GetUserDefaultLCID

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize

msvcr71

_controlfp
_onexit
__dllonexit
swprintf
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??1type_info@@UAE@XZ
__security_error_handler
_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ

oleaut32

GetErrorInfo
SysFreeString

sqlftwiz

_DoSQLFTWiz@16

semsfc

?LoadString@SString@@QAEHPAUHINSTANCE__@@I@Z
??BSString@@QBEPBGXZ
??0SString@@QAE@XZ
??1SString@@QAE@XZ

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e4afd517b72b351a60df3a5e738b2f41

Headers

File Characteristics

Imports

sqlunirl

sqlresld

kernel32

ole32

msvcr71

oleaut32

sqlftwiz

semsfc

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 116B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 116B

.rsrc
Size: 1KB - Virtual size: 1KB