2d53ab274f09dc58e6efe4e1e40c4302

General

Target

2d53ab274f09dc58e6efe4e1e40c4302
Size

205KB
MD5

2d53ab274f09dc58e6efe4e1e40c4302
SHA1

2de366c8665f32a9ecb8d5d6f291bb54a92a0969
SHA256

eb11404aa07e3ee49f0862b20f249a34245758f211bd6f7e35cb57b4d84689fd
SHA512

d70dd3c4047c6d7a944ffcefc5954caf8ae63a8e9bd6a23ae991131af5f86a660c6c64fe7a6d6e8d0c2505bd077de4cb3be0368a5d0fc96acbb5dcf1bd98a1b3
SSDEEP

3072:3u34lGmMWPB7pY3Z9CvYROJn/nOea1WJQi0/0pHB3/I92LMjNE9qsCaOflvId:eIxMWPtpY3Z9CZJ/nmeQi7/IzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d53ab274f09dc58e6efe4e1e40c4302

Files

2d53ab274f09dc58e6efe4e1e40c4302
.exe windows:5 windows x86 arch:x86

611f224088c1161caa2d0218e0d010f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetProcAddress
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
Sleep
DeleteFileW
GetModuleHandleW
GetLastError
FreeConsole
RemoveDirectoryW
SetFileAttributesW
LocalFree
LocalAlloc
ExitProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DeleteCriticalSection
GetThreadLocale
InterlockedExchange
GetACP
GetVersionExW
InitializeCriticalSection
GetVersionExA
MultiByteToWideChar
lstrlenA
CopyFileW
GetLocaleInfoA

user32

GetKeyState
BringWindowToTop
SendMessageW
GetMenuItemID
GetSubMenu
ModifyMenuW
SetRect
SystemParametersInfoW
DrawStateW
GetSysColor
LoadBitmapW
GetMenuItemCount
CopyRect
SetCursor
CheckMenuItem
GetDC
GetCapture
InflateRect
SetClassLongW
ReleaseDC
LoadCursorW
GetClientRect
GetWindowPlacement
InvalidateRect
GetSystemMetrics
UpdateWindow
EnableWindow
SetWindowRgn
ScreenToClient
DrawTextW
ShowWindow
IsWindow
ShowScrollBar
IsRectEmpty
FillRect
LoadImageW
ShowCursor
SetRectEmpty
DestroyIcon
GetTopWindow
GetParent
GetWindow
SetTimer
GetWindowRect
SetCapture
PostMessageW
KillTimer
GetFocus
TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetCursorPos
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLBulkOperations

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 645KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

611f224088c1161caa2d0218e0d010f2

Headers

File Characteristics

Imports

kernel32

user32

odbc32

Sections

.text Size: 130KB - Virtual size: 129KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 66KB - Virtual size: 645KB

.rsrc Size: 5KB - Virtual size: 8KB

.text
Size: 130KB - Virtual size: 129KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 66KB - Virtual size: 645KB

.rsrc
Size: 5KB - Virtual size: 8KB