524c400828b80c7e6b992087044e38b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

524c400828b80c7e6b992087044e38b0
Size

376KB
MD5

524c400828b80c7e6b992087044e38b0
SHA1

eda7908b6e9a0873958b016cc779559044615c91
SHA256

e29d08f689da8ab76a8c53db0ee80883260c98f9740b9356005ee52ec393d233
SHA512

f6fc357b43a463879966f2c540b269bca272a9683541e932ab1ea8dae36caf5180a03bf873d08eed19935d721a5586c2370f1ba90409a27341b8500543391db9
SSDEEP

6144:vF1kwdqTCAxKNQVPbuNn1OZEygCwrpJPqbBexTnwP//jd7O/g4uGpyv:t1FdWxwS6eZEyRwNWkx8bJzGp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
524c400828b80c7e6b992087044e38b0

Files

524c400828b80c7e6b992087044e38b0
.exe windows:5 windows x86 arch:x86

b5b1bbdb6a19b787e7a7e4debaab1924

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
OutputDebugStringW
GetNativeSystemInfo
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegCloseKey

odbc32

SQLFetch

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ