7c216011a8839ac74cb1790d7c5d28b3d992ccfba9169bb4d15211b4d740cd85

General

Target

7c216011a8839ac74cb1790d7c5d28b3d992ccfba9169bb4d15211b4d740cd85
Size

8KB
MD5

375e1e1f27645a75e989931d5e03799f
SHA1

875171de630d03eb5ba06ce5a06088393630e9fe
SHA256

7c216011a8839ac74cb1790d7c5d28b3d992ccfba9169bb4d15211b4d740cd85
SHA512

5be05e67d5a35c99a9fb9f4997138fb8aa8269c7cdf453e6358e6652ee74733ed06baf9817f634dbe6592a1143cf631bb135c77c97f1553f10b4718410a11cae
SSDEEP

96:qsnP33DANYQGrjW2QOrLtm8H/p5uG4JI/3XBg+3pmWCZudfUsnfRzx:tnP3Tnfjpjtpt4JI/3XX3pm3ZG8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c216011a8839ac74cb1790d7c5d28b3d992ccfba9169bb4d15211b4d740cd85

Files

7c216011a8839ac74cb1790d7c5d28b3d992ccfba9169bb4d15211b4d740cd85
.dll windows:6 windows x64 arch:x64

888f134ac03853db1882ebe57c2dd317

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\work\NetVision\Dev\Install\Scripts\InnoSetup_MULTI\ProgramDir\PgBuild\postgresql\Release\ascii_and_mic\ascii_and_mic.pdb

Imports

postgres.exe

pg_mic2ascii
pg_ascii2mic
check_encoding_conversion_args

msvcr120

_initterm
_initterm_e
__C_specific_handler
_malloc_crt
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
free
_amsg_exit
__CppXcptFilter
_lock

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
EncodePointer
GetCurrentProcessId

Exports

Exports

Pg_magic_func
ascii_to_mic
mic_to_ascii
pg_finfo_ascii_to_mic
pg_finfo_mic_to_ascii

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

888f134ac03853db1882ebe57c2dd317

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

postgres.exe

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 88B

.pdata Size: 512B - Virtual size: 216B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 16B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 88B

.pdata
Size: 512B - Virtual size: 216B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 16B