408ad5005c7300fbac2a6152cf6d6823 | Triage

Sharing

General

Target

408ad5005c7300fbac2a6152cf6d6823
Size

383KB
MD5

408ad5005c7300fbac2a6152cf6d6823
SHA1

b0183a8b7f02218758b630306ec534d2b6b6d101
SHA256

c3d2d68d600411ee67795ff92c54896789c55e22e02448bf89f889ece0a73978
SHA512

936f50bf6706283aeb4e8d614683f2a80a44f1c23a9c4117e1143ad563a484af72b75741664fa6d219e47886ffdd599a2c35a68d86ab099f47766c1a3602da05
SSDEEP

6144:9F1ZusedZSXAjedtGD4ZDNW6h/hMmD7Qde9u09YI6XRcsZXmgyejfk2WGSc2bb/x:P1uDSw8UDkRvhMmD0de9dYcsZXmocmSk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
408ad5005c7300fbac2a6152cf6d6823

Files

408ad5005c7300fbac2a6152cf6d6823
.exe windows:5 windows x86 arch:x86

b5b1bbdb6a19b787e7a7e4debaab1924

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
OutputDebugStringW
GetNativeSystemInfo
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey

odbc32

SQLFetch

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ