sqlite-netFx46-setup-x64-2015-1[.]0[.]118[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sqlite-netFx46-setup-x64-2015-1.0.118.0.exe
Size

19.1MB
MD5

b356c0835ae6b5c79fa1093db766b6e5
SHA1

3e2cbde71f6f888e48a2e7549bc493d14de30fd3
SHA256

9f51af211d696c6c377bdbae9e6d5113a8bd0fa7eef960eb1a7b13900841d1db
SHA512

4c99e94f58bb6e5fe6890863139247998d8c92a9bb21da4e0750ddab4082e50447e63e4a4a843c72aa3ba0ec805b7562e7b70df7eef3f7a4488a9a1fb6718618
SSDEEP

393216:pyG8IRYS5tBp9kNwdzTnSu2NAe8HaUNl5vKeTKzADVvzMCLs2EfeV0nJBmK:oGRYO0NkfmNUNlJKeOKHRGxJgK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sqlite-netFx46-setup-x64-2015-1.0.118.0.exe

Files

sqlite-netFx46-setup-x64-2015-1.0.118.0.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ