4d83f980ddbc568dec9c26704c632af9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d83f980ddbc568dec9c26704c632af9
Size

260KB
MD5

4d83f980ddbc568dec9c26704c632af9
SHA1

106a6e4db097d976ae33008d93e94d00683f8c28
SHA256

71f3a7f6963caf9c1fc5969530f9b0868ced7985b5d03c4dae88c70fa6f43dc9
SHA512

440bd452b73bcf813d5cac632a34465d1ec5eb2b8e09f0f091006ab81bd4edbc12fd8141339fe8835a14a43080b2cefdac5d49b5cac55ef678ced472f1736caa
SSDEEP

6144:vfPMhlQU8HPhaikn0xrBs2Q0FxGUGNqqyfRRXIuD/aH:EhA/GQra2/GxOR4umH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d83f980ddbc568dec9c26704c632af9

Files

4d83f980ddbc568dec9c26704c632af9
.exe windows:5 windows x86 arch:x86

a8dfe11d84c50d8140f2bea48f778a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetCurrentThreadId
OutputDebugStringW
FreeLibrary
SetCurrentDirectoryW
GetModuleFileNameW
GetCurrentDirectoryW
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
IsDebuggerPresent
RaiseException

user32

CharNextW
UnregisterClassA
FindWindowA

odbc32

SQLFreeConnect

advapi32

RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExW

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 810KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ