06bfc68d2c814e954edd2728d3801608 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06bfc68d2c814e954edd2728d3801608
Size

380KB
MD5

06bfc68d2c814e954edd2728d3801608
SHA1

7956c500d7476054014d4f154d44a045be7ccd19
SHA256

14ffe42d37f911b0a2599bbd5dd27c2d79a3c24744413252fd01f0760c899805
SHA512

adcbb1e9b77fe915a31acadada3a2429a5c688ec2b14af1ced43a8ff863eeea76540abe57caccb47064b39c397e57cc54a2a997d5ce7e94eb4e395eab18ac5a5
SSDEEP

6144:Y+np2q3/TcyJQGJsi2Np6ylfT2sDqlJBlaZHqsVnhSULYVUnKDRSk:Y+8q3/TcyRWRdL2stKSH4QKD8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06bfc68d2c814e954edd2728d3801608

Files

06bfc68d2c814e954edd2728d3801608
.exe windows:5 windows x86 arch:x86

2c44b6a31ebe9506b1dc60cd7d29f3f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegQueryValueExA

odbc32

SQLFreeHandle

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ