ab89788e39f7a137923bab5165d967a8 | Triage

Sharing

General

Target

ab89788e39f7a137923bab5165d967a8
Size

244KB
MD5

ab89788e39f7a137923bab5165d967a8
SHA1

805471edef0f84531a84502c05fa435c3ca10653
SHA256

e71e4b4dfc96a8fca26601a502bcefa938fe93c4d7222f53d8dce6b8b7f148bc
SHA512

122108729a13090f6b7df1fd849198142aca52dc647231acc8e6b80f14998090f5ba83cf24a29db7ff10542dc2b922460dfead373c881170e6985a4759c11d84
SSDEEP

6144:Iu3cSqjRtrTYBDIPkS3r2GZiJFS3/4HDR3oYRr:MtrTOQP72GNwjhr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab89788e39f7a137923bab5165d967a8

Files

ab89788e39f7a137923bab5165d967a8
.exe windows:5 windows x86 arch:x86

007f7209ce5b21b4494bce189afaa5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException

user32

DdeDisconnect

odbc32

SQLFreeHandle

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 807KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ