Static task
static1
Behavioral task
behavioral1
Sample
DBConnectConfig.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DBConnectConfig.exe
Resource
win10v2004-20230703-en
General
-
Target
DBConnectConfig.exe
-
Size
24KB
-
MD5
ca17f7e0828b13da6cfc3b3c91838874
-
SHA1
fd96dcc6b1990d120877cd506e852bc9873a3572
-
SHA256
a9bd2594b6b570d871639ebd58954060c83559721f9120037e757a9e5707fa7f
-
SHA512
8ebdcd990568aa6cdf710f360c48425a6ae69e29be7ee9a8a1c2b5eda9d5a24a3bc0eddc82f2cce14d89144c0e06801f719c6ca296e38120d7b59254f8ac4c40
-
SSDEEP
384:MuDX3SioYNyG31rvP96uNwLgqxlIspKY+PbQhyG9z9y4sS9GnuZeC0nwLgi:M4JqEspVsqyDSEEefnJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DBConnectConfig.exe
Files
-
DBConnectConfig.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ