dbup70504[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

dbup70504.exe
Size

3.9MB
MD5

389e3c12dc1a552d35fe6de914aeccdf
SHA1

fede3fef22a81a9a13c03f8d832a97c9316198ed
SHA256

329d98ea3574766737bbecc28f4a775ed613fb4e710a78ed12726a5537334187
SHA512

985e202b0542f4eca90ef458c56cae0831ebef2b894cd0da03a26e4419a63a7f3b3bd897dc224b621af2a2ea65273732fa30db4e9705f0de2752a34ccd95f675
SSDEEP

98304:G22RcGrwy889q+DVca8uQ7m8ZIXPtC74j866Zj1x+lKi:129g+Duz1y8JXx+l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbup70504.exe

Files

dbup70504.exe
.exe windows:5 windows x86 arch:x86

d4c9d84d9b3e0ea966ad09aace4e3bfb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersionExA
GetVersion
GetVersionExA
GetVersion
FileTimeToSystemTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DrawIcon

advapi32

RegDeleteValueA

oleaut32

VariantCopyInd

version

GetFileVersionInfoSizeA

gdi32

CreateBitmap

ole32

CLSIDFromString

comctl32

ImageList_GetDragImage

errors32

ClearErrorSpecials

sqlite3

sqlite3_update_hook

sqlcipher

sqlite3_result_text

Sections

CODE
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 436B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4c9d84d9b3e0ea966ad09aace4e3bfb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

errors32

sqlite3

sqlcipher

Sections

CODE Size: - Virtual size: 2.8MB

DATA Size: - Virtual size: 114KB

BSS Size: - Virtual size: 19KB

.idata Size: - Virtual size: 12KB

.tls Size: - Virtual size: 436B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 2.4MB

.vmp1 Size: 3.9MB - Virtual size: 3.9MB

.reloc Size: 512B - Virtual size: 192B

.rsrc Size: 2KB - Virtual size: 1KB

CODE
Size: - Virtual size: 2.8MB

DATA
Size: - Virtual size: 114KB

BSS
Size: - Virtual size: 19KB

.idata
Size: - Virtual size: 12KB

.tls
Size: - Virtual size: 436B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 2.4MB

.vmp1
Size: 3.9MB - Virtual size: 3.9MB

.reloc
Size: 512B - Virtual size: 192B

.rsrc
Size: 2KB - Virtual size: 1KB