2980953553f9fd4c8415badabc96279d

Sharing

Copy URL

Twitter E-mail

General

Target

2980953553f9fd4c8415badabc96279d
Size

84KB
MD5

2980953553f9fd4c8415badabc96279d
SHA1

76637d6ec3ca792758a201c16f46ac1b0aaa900e
SHA256

6c09c29f1df8b16b0674db9e9e24b82c4664f5c8d1c1286ec08dd3b58c4e0480
SHA512

7cac9d58ac264d7151b4f75d2deec0f2f0105596debed06d17f0729fb11181bd766cca6f23caba96b30ca537870d7ebe4e5bbcb760c9533928a4ba3e0d830f59
SSDEEP

1536:OEGY8ykXkdrYu8EDcM2dJBNNY9MX+GGj8K2pizxCO0C+1ZudbPyglkLYIe:5x8ykY8xdJWMRGIKVzF8v4lgYIe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2980953553f9fd4c8415badabc96279d

Files

2980953553f9fd4c8415badabc96279d
.exe windows:5 windows x86 arch:x86

867724a968c3c7ff6ef5eb1fe631a273

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iasnap

DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetClassObject

query

??1SStorageObject@@QAE@XZ
??0CFwEventItem@@QAE@GKGKPAX@Z
??1CPropertyStore@@QAE@XZ
?SkipChar@CMemDeSerStream@@UAEXK@Z
??1CRestriction@@QAE@XZ
?ciIsValidPointer@@YGHPBX@Z
?ChangeCurrentCatalog@CCatState@@QAEXPBG@Z
?CIShutdown@@YGXXZ
?Shrink@CDynStream@@QAEXAAVPStorage@@K@Z
??0CSvcQuery@@QAE@PBGPAUIDBProperties@@@Z
?UnMarshall@CDbNumeric@@QAEHAAVPDeSerStream@@@Z

odbc32

SQLSetCursorNameW
SQLTablesW
SQLGetInfoW
SQLColumnPrivilegesA
SQLColumns
ValidateErrorQueue
SQLDriverConnectW
ODBCInternalConnectW
SQLFetch
SearchStatusCode
SQLDataSourcesA
SQLProcedureColumnsW
SQLBindParam
PostComponentError

certcli

CASetCAExpiration
CAEnumNextCA
CAGetCertTypeFlagsEx
CAGetCAProperty
CACloneCertType
CAGetCertTypeProperty
CACreateCertType
CAEnumCertTypesForCA
CAFreeCAProperty
CASetCAProperty
CAAccessCheckEx
CAGetCAExpiration

kernel32

GetConsoleCP
GetBinaryTypeA
HeapCreate
GetTickCount
ClearCommBreak
SetConsoleScreenBufferSize
GetSystemTimeAsFileTime
HeapQueryInformation
VirtualAlloc
InterlockedIncrement
DeleteAtom
GetLastError
VirtualUnlock
GetCommModemStatus
SetEnvironmentVariableA
OpenConsoleW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentThreadId
GetThreadPriorityBoost
LoadLibraryA
GetCurrentProcessId
GetVersionExA
FindNextVolumeMountPointW
FatalExit
EnumDateFormatsExA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

867724a968c3c7ff6ef5eb1fe631a273

Headers

DLL Characteristics

File Characteristics

Imports

iasnap

query

odbc32

certcli

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 18KB - Virtual size: 61KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 316B

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 18KB - Virtual size: 61KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 316B