1817486b4c67e1cb9753d6a9468a5c25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1817486b4c67e1cb9753d6a9468a5c25
Size

338KB
MD5

1817486b4c67e1cb9753d6a9468a5c25
SHA1

7796e6a3d9cb2c5fecbcd4f2ff2aa2908568275f
SHA256

e0854aa98c1d326a5827f1ee9a368b5925743c8f989ee22656f436e632dd7d59
SHA512

3505de2ca3627342b1db461dd0c82efee58b0a576c0fafcd9913c8cdac05d83e5afcc2e177dafb4a7bbd7a21b3527ea02a40a2b613dec9579e5c29323d57c298
SSDEEP

6144:EpyvVChXU7HdOFhW+hO5ai7yIg1dhYvFUdcV2DvQYcpXHCe4pVRxtg4WM8M++yWH:EWCVEHae/v1V2shXHCBVRx24WMr++yWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1817486b4c67e1cb9753d6a9468a5c25

Files

1817486b4c67e1cb9753d6a9468a5c25
.exe windows:5 windows x86 arch:x86

037690652f86ff6f033755d6dcbd9342

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegQueryValueExA

odbc32

SQLFreeHandle

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 807KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ