Static task
static1
Behavioral task
behavioral1
Sample
DBRepair.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
DBRepair.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
3043372/ProSqlDBRepair.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
3043372/ProSqlDBRepair.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
ProSqlDBRepair.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
ProSqlDBRepair.exe
Resource
win10v2004-20231215-en
General
-
Target
79fe422050a4ad51db057051391c11f6
-
Size
660KB
-
MD5
79fe422050a4ad51db057051391c11f6
-
SHA1
7e15c6f37705fb841fd1abd31b10be57d2e6664a
-
SHA256
af755b7ec09223f98791fb2a758beb7bfa4021a6982272bc8776bd9f94b5a597
-
SHA512
39e7fd9a21bb894e2e80633e38d598fc165c88971ceeadb9207dc79b4fef5a7b6334776b0fa9c79fe15970c4a7704d91b0b7b069e582ee42727c39107d25101b
-
SSDEEP
12288:/A/IeD+D0K3ssfsMm4fR/SjtloRsMSIHJCHjOtZTNSBMxyVrAhF:SD+J3fsU5/Sjf/MSIJGjOtZTNuMxyhAD
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack002/DBRepair.exe unpack001/3043372/ProSqlDBRepair.exe unpack003/ProSqlDBRepair.exe
Files
-
79fe422050a4ad51db057051391c11f6.rar
-
3043372/DbRepair.rar.rar
-
DBRepair.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Pic1.jpg.jpg
-
3043372/Pic1.jpg.jpg
-
3043372/ProSqlDBRepair.cfg
-
3043372/ProSqlDBRepair.dof
-
3043372/ProSqlDBRepair.dpr
-
3043372/ProSqlDBRepair.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
3043372/ProSqlDBRepair.rar.rar
-
ProSqlDBRepair.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
3043372/ProSqlDBRepair.res
-
3043372/UntMain.dcu
-
3043372/UntMain.ddp
-
3043372/UntMain.dfm
-
3043372/UntMain.pas
-
3043372/UntMain.~ddp
-
3043372/UntMain.~dfm
-
3043372/UntMain.~pas
-
3043372/下载说明.htm.html .js polyglot