1b0f7c7726da437cde197c385acc4626 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b0f7c7726da437cde197c385acc4626
Size

379KB
MD5

1b0f7c7726da437cde197c385acc4626
SHA1

143bfd6c8f3bf50e946474d517318b70d33f626a
SHA256

ca54be5b18c1b6ffe2c579e012ded13374d34a6cdef8516160b1083cc2fdedbf
SHA512

51020599ed627f5646d8f7def04925b5d7769d0fb63311d5379925dce43dcd2e84ef9134012a82023dab04febbd97e7e6dcc090cc5d929fcd145569b445894b5
SSDEEP

6144:qKLQ4zjnyuK8tCuGgZAT6PpNNmO0z1s37Uuq09FXG95Q78QvtCYu2IqC1Zp6J:qc/nB3tbGgZBNNG1s4tKxS5Q73vtCYu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b0f7c7726da437cde197c385acc4626

Files

1b0f7c7726da437cde197c385acc4626
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ