74f7fcf6879a662477ee4b7db0339216 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74f7fcf6879a662477ee4b7db0339216
Size

269KB
MD5

74f7fcf6879a662477ee4b7db0339216
SHA1

d5b05040a1f1f63744b27a0ee0552708b767e555
SHA256

a5827a4db59ba4f784dabc9fe65d1615f5fd72c98da9d8eb41519f29e01ad603
SHA512

002c40f63cff0446578d8a9c4740e7f3755f756573fcce844ec5e28381108d01b6aa4330b64cf651469bb715e55ff9f70d9ef8413c1feee76c0655cf3d718f86
SSDEEP

6144:7EOD0z9PE3o/6pVJp3vouBAqsUl15Z6eN0MRl+rjC1Ja7E:gKg9PYo/8VXvouBAqsUVUeNVn+G1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74f7fcf6879a662477ee4b7db0339216

Files

74f7fcf6879a662477ee4b7db0339216
.exe windows:5 windows x86 arch:x86

4e28e74c63599ba7c9022b39ba0df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringA
GetStartupInfoA
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ