3f9ae680f7d1e1b6b022cea5bce0ac23 | Triage

Sharing

General

Target

3f9ae680f7d1e1b6b022cea5bce0ac23
Size

337KB
MD5

3f9ae680f7d1e1b6b022cea5bce0ac23
SHA1

a3d5ebb0c77faf0ee10851a5f4aaadff01453eea
SHA256

06730a7eb153e15e7b8c76ed87f19368cbbbab8caf4a44a6deb7bade0bcae02a
SHA512

0a2cf71ef72a300733d3442c53fbdae41bf6384572f4fe24e8e4ab4e85b1afb4ec93af26f744e2a852b77fa7b847a296df4a5ff614e7bddf316e60a827d03e4b
SSDEEP

6144:lFEvoAbS3YdBoKohpFrl74IkyWM6O4B2ygMuoDSLOEwWpFlzUeGMvHuMMNCw6jfi:l5IdBZcpFryyWM34BuMuoDIwWJIxnvNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9ae680f7d1e1b6b022cea5bce0ac23

Files

3f9ae680f7d1e1b6b022cea5bce0ac23
.exe windows:5 windows x86 arch:x86

c2032835cf8c513ace81a70c8a98ad62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

UnregisterClassA
DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ