databend-driver[.]win32-x64-msvc[.]node

Sharing

Copy URL Twitter E-mail

General

Target

databend-driver.win32-x64-msvc.node
Size

12.2MB
MD5

fb9068a18a5b9de286b0dfc00b4fc203
SHA1

2b7e1c613ea1e8cb254a662501c11ad3d87ddcdd
SHA256

d258e04e4c5c57fbaed9fda838d35cf4cf6281b9d8718aa47d125f83594ce782
SHA512

85bafce12eacbc3276bb64945a2596ab94c456474925cab6fcc0616adf4a3702699445d0df7566410a624d75ca902716ef262a9eb135e4fff1bf2bc7e12a7b34
SSDEEP

98304:uKiiVvTDxX9LbCTtvwgrjnP3xFsmZH+rAvvfQInzB/98wXqVwtBfsqdb+h/IEZlC:9ubeDZ7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
databend-driver.win32-x64-msvc.node

Files

databend-driver.win32-x64-msvc.node
.dll windows:6 windows x64 arch:x64

52951761091f283d91437413641e7f82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

bcrypt

BCryptGenRandom

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
SystemFunction036

kernel32

FormatMessageW
CloseHandle
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
RtlVirtualUnwind
SetHandleInformation
GetCurrentProcessId
GetProcAddress
GetLastError
FreeLibrary
GetModuleHandleExW
SleepConditionVariableSRW
GetSystemInfo
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SetFileCompletionNotificationModes
ReleaseMutex
FindClose
SetThreadStackGuarantee
SwitchToThread
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
SetFilePointerEx
GetStdHandle
WaitForSingleObject
TerminateProcess
WakeAllConditionVariable
WakeConditionVariable
QueryPerformanceCounter
QueryPerformanceFrequency
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetModuleHandleA
FindNextFileW
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
CreateDirectoryW
FindFirstFileW
GetFinalPathNameByHandleW
GetConsoleMode
GetModuleHandleW
IsProcessorFeaturePresent
GetFullPathNameW
MultiByteToWideChar
WriteConsoleW
CreateThread
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId

ntdll

RtlNtStatusToDosError
NtReadFile
NtCreateFile
NtDeviceIoControlFile
NtWriteFile
NtCancelIoFileEx

ws2_32

shutdown
recv
send
WSASend
setsockopt
WSAIoctl
WSAGetLastError
WSAStartup
WSACleanup
freeaddrinfo
getaddrinfo
getsockopt
closesocket
getsockname
ioctlsocket
connect
bind
WSASocketW
getpeername

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
_CxxThrowException
memset
memmove
memcmp
memcpy
__CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

pow
round
floor
trunc
log2
ceil

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_cexit
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

napi_register_module_v1

Sections

.text
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52951761091f283d91437413641e7f82

Headers

DLL Characteristics

File Characteristics

Imports

bcrypt

advapi32

kernel32

ntdll

ws2_32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 8.4MB - Virtual size: 8.4MB

.rdata Size: 3.2MB - Virtual size: 3.2MB

.data Size: 15KB - Virtual size: 17KB

.pdata Size: 458KB - Virtual size: 457KB

.reloc Size: 51KB - Virtual size: 50KB

.text
Size: 8.4MB - Virtual size: 8.4MB

.rdata
Size: 3.2MB - Virtual size: 3.2MB

.data
Size: 15KB - Virtual size: 17KB

.pdata
Size: 458KB - Virtual size: 457KB

.reloc
Size: 51KB - Virtual size: 50KB