67b32586e7e8481f051258548fa36a57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67b32586e7e8481f051258548fa36a57
Size

269KB
MD5

67b32586e7e8481f051258548fa36a57
SHA1

40de447a9e554f2fa20aee6e20053c35c744e180
SHA256

e939c5e0cc4eca9286bbeacaf3df0a27866a3770fc40e7b1382d3ed3236aa49e
SHA512

e12c9566200095f2a11d389b66bcaa777802f0f5737b304887961f922503b299d0f3ca78473eccabefdd092846d7499354568f9e8b3dcd138130f060b8bc4308
SSDEEP

6144:tGPO/3NbfBRmG1fb1q0QjqWscPSTLa8Ij87HH/9GHoamwr:tT/3NbfBfBMhqxqWU87/9FaR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b32586e7e8481f051258548fa36a57

Files

67b32586e7e8481f051258548fa36a57
.exe windows:5 windows x86 arch:x86

4e28e74c63599ba7c9022b39ba0df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ