5cc1100bf85895996c925aeb61b0e692db3f52622649cfc5f1b99ff1892a09d6

Sharing

Copy URL Twitter E-mail

General

Target

5cc1100bf85895996c925aeb61b0e692db3f52622649cfc5f1b99ff1892a09d6
Size

13KB
MD5

60def9fc9feec5c507af2d8b55047f01
SHA1

d3050661716ca74c369c1651127192dd9a8cf94e
SHA256

5cc1100bf85895996c925aeb61b0e692db3f52622649cfc5f1b99ff1892a09d6
SHA512

6f06a5d2f43ae4e6cc54b2933ecbeae618bef719c5327a407526a9492329ef22545fd6e0394661c8f868f34f39c19bcce4e6758994aff28edcbc4af85526cb83
SSDEEP

192:zhqDbSP/kBtm7DfbbyVIpm2jpwwJvyPnDgQn6UB/Zi7Jnh3XXvAvsN0d:zhqDbO/kjUsgm2itDRYndHvAvRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cc1100bf85895996c925aeb61b0e692db3f52622649cfc5f1b99ff1892a09d6

Files

5cc1100bf85895996c925aeb61b0e692db3f52622649cfc5f1b99ff1892a09d6
.dll windows:6 windows x64 arch:x64

9471913ae6d7345fd22b6f8bc0898ae6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\work\NetVision\Dev\Install\Scripts\InnoSetup_MULTI\ProgramDir\PgBuild\postgresql\Release\euc_tw_and_big5\euc_tw_and_big5.pdb

Imports

postgres.exe

report_untranslatable_char
report_invalid_encoding
check_encoding_conversion_args
pg_encoding_verifymb
pfree
palloc

msvcr120

_amsg_exit
free
_malloc_crt
__CppXcptFilter
_initterm_e
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_initterm

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer

Exports

Exports

BIG5toCNS
CNStoBIG5
Pg_magic_func
big5_to_euc_tw
big5_to_mic
euc_tw_to_big5
euc_tw_to_mic
mic_to_big5
mic_to_euc_tw
pg_finfo_big5_to_euc_tw
pg_finfo_big5_to_mic
pg_finfo_euc_tw_to_big5
pg_finfo_euc_tw_to_mic
pg_finfo_mic_to_big5
pg_finfo_mic_to_euc_tw

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9471913ae6d7345fd22b6f8bc0898ae6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

postgres.exe

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 88B

.pdata Size: 512B - Virtual size: 480B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 16B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 88B

.pdata
Size: 512B - Virtual size: 480B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 16B