c69e864715348c2f660dc2ac3c1f224e | Triage

Sharing

General

Target

c69e864715348c2f660dc2ac3c1f224e
Size

200KB
MD5

c69e864715348c2f660dc2ac3c1f224e
SHA1

4e6fd2fb2faf70ae04f43bc4128bc2889e937355
SHA256

12c641c0ee76131f0b31f1585d9592d7b12c8d6590a27e1a7f398d2778cf4406
SHA512

b7f9d415dd85ae18a07b042f3a068411ae3092dca462aab80d4dc12b434bb18953dec6f53b3f430691683418ec55b93c9898ccff63ab9900daa7c9cfd4d43cef
SSDEEP

6144:jlLq/I+mO31DBybYdTJgr9OuZjOVce3BHdmzG39:hLqbN33RJgnRgVH4zGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c69e864715348c2f660dc2ac3c1f224e

Files

c69e864715348c2f660dc2ac3c1f224e
.exe windows:5 windows x86 arch:x86

25107c415dbe806549863e9a2ebd1e1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GetModuleHandleA
GetModuleFileNameA
CreateDirectoryA
WaitForMultipleObjects
ExitThread
CreatePipe
CreateSemaphoreW
WriteFile
FindClose
Beep
RemoveDirectoryA
IsBadWritePtr
SetVolumeLabelA
GetVersion
GetDriveTypeA
GetFileType
DeleteAtom
GetCommandLineA
CloseHandle
FindAtomA
GetTapeStatus
HeapFree
HeapCreate
AddAtomW

uxtheme

DrawThemeEdge
GetThemeTextMetrics
GetThemeColor
IsThemeActive
CloseThemeData
GetThemeBool
GetThemeSysSize
SetWindowTheme
GetThemeTextExtent
CloseThemeData
OpenThemeData
DrawThemeBackground
GetWindowTheme

odbcbcp

bcp_bind
bcp_bind
bcp_bind
bcp_bind

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE