b745b85c13b9128f479b3bfb8ed8e860 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b745b85c13b9128f479b3bfb8ed8e860
Size

397KB
MD5

b745b85c13b9128f479b3bfb8ed8e860
SHA1

90e5c300c5f011a53dfc244b099ea1ec4d9f9615
SHA256

931c4efec7bcd0c94340cd3eb3005abc8b3eea1c4dbb5117c1a5daa39f19626d
SHA512

7f4fb1353fd2e379e8bb9d883423535c687d47273809fdf83cc4c60073ecff604ecfb63b32b8e68dbcf206b59496f6102ade69d6d24db0f9e286dfa7a24bf8eb
SSDEEP

6144:RpVmFuhsO8TTLjWyFo4xuyvaRi26aUjXt8ohNBIj77jVTUaumcK+yJM:lCu6TzKym4xZajVU+ohLIHNTUm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b745b85c13b9128f479b3bfb8ed8e860

Files

b745b85c13b9128f479b3bfb8ed8e860
.exe windows:5 windows x86 arch:x86

4058b755640407d72b28a3ed51bfe6a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetProcAddress
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
Sleep
DeleteFileW
GetModuleHandleW
GetLastError
LocalFree
LocalAlloc
ExitProcess
QueryPerformanceFrequency
RaiseException
GetTickCount
GetCurrentThreadId
DeleteCriticalSection
GetThreadLocale
InterlockedExchange
SetLastConsoleEventActive
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

ShowCursor
SetRectEmpty
DestroyIcon
GetTopWindow
GetParent
GetWindow
SetTimer
GetWindowRect
SetCapture
PostMessageW
KillTimer
GetFocus
TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ