493d093764e526e684a5aeccb386cb8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

493d093764e526e684a5aeccb386cb8a
Size

380KB
MD5

493d093764e526e684a5aeccb386cb8a
SHA1

88bdba8fdeb445a1897704cae75805826de72e82
SHA256

dd880ddac6deeadd150c550155b7f2ede834baddb9364000c904c5430ee19a1c
SHA512

37f8d8167513ae76cfc9e5bee3a7ed224d571f49d5df5d2f6c2880dc9b6963806069b46ee41eb97d6dbe01ae0ee7b25cdb079cd647ce3a8bd1a60c6ed71c4497
SSDEEP

6144:+Ol4rwvDRLgm6KmbDbgBR48yGaRofcTq+K5SxOlIHO2YnMLvrQGbDfgOD/i:+OlJvurTgm8TGofcTX4yOliYnMLv3EOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
493d093764e526e684a5aeccb386cb8a

Files

493d093764e526e684a5aeccb386cb8a
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ