0bd6d5c9273a3bdc46dbdbd816940a84 | Triage

Sharing

General

Target

0bd6d5c9273a3bdc46dbdbd816940a84
Size

31KB
MD5

0bd6d5c9273a3bdc46dbdbd816940a84
SHA1

28c3e832651ed18858cdb7be81ba7bc8893a3a5a
SHA256

33fa387857766596127e8df07718310cb14d95355eec15b5c7980a355d6a7450
SHA512

5574c4125256435edf3eeb0bfa37ca95f51cc9663985f78a449eba0dd18bd45315692fb8e3683f051144ed85482eddaf58fe5aadfcde0fc027b7a9be09f3a3e8
SSDEEP

768:JRFSsBYw3PlLjM868R8Z8s888m8E8QvF7I+qJj8aUJNGtkqsN4NOnCQsEyfyPiF+:ln/Mzq+5hRpfvF7I+KQau+VNOnjsEyXY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bd6d5c9273a3bdc46dbdbd816940a84

Files

0bd6d5c9273a3bdc46dbdbd816940a84
.exe windows:4 windows x86 arch:x86

19a97edcdbd68f92541abb27eddf759f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIpow
_CIexp
malloc
free
fseek
ftell
fread
fclose
strlen
strcpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
HeapReAlloc

user32

GetForegroundWindow

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ