0b3fa16ffdb853f1a5faf3baeeba0760N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0b3fa16ffdb853f1a5faf3baeeba0760N.exe
Size

61KB
MD5

0b3fa16ffdb853f1a5faf3baeeba0760
SHA1

28e092a6457eb5ea6f03e4eff5a61ae03cf6c031
SHA256

eb33ef01c8a8b8397c0fea5c561de8f2499b00abdb1c69ff5256aebb0ba2f766
SHA512

78fd5f6489c1cf8e9b2c576787165a1f7c28b28c0aafa91eac5bf2a8bd30e4946ccc0cbdf9e91b6aef72d67219b7592226b9a7fb354923e146be8ea66ba62b0b
SSDEEP

384:I0EJYEf4iSM0vJJtmG4EPsEVoAHBe21sXSQe:ILDEm9EtDhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3fa16ffdb853f1a5faf3baeeba0760N.exe

Files

0b3fa16ffdb853f1a5faf3baeeba0760N.exe
.dll windows:4 windows x86 arch:x86

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
RaiseException

Exports

Exports

LibMain
SQLCloseEnumServers
SQLGetNextEnumeration
SQLInitEnumServers
SQLLinkedCatalogsA
SQLLinkedCatalogsW
SQLLinkedServers
bcp_batch
bcp_bind
bcp_colfmt
bcp_collen
bcp_colptr
bcp_columns
bcp_control
bcp_done
bcp_exec
bcp_getcolfmt
bcp_initA
bcp_initW
bcp_moretext
bcp_readfmtA
bcp_readfmtW
bcp_sendrow
bcp_setcolfmt
bcp_writefmtA
bcp_writefmtW
dbprtypeA
dbprtypeW

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 4KB - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 4KB - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 4KB - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.rodata Size: 4KB - Virtual size: 572B

.rdata Size: 4KB - Virtual size: 96B

/4 Size: 4KB - Virtual size: 584B

.edata Size: 4KB - Virtual size: 752B

.idata Size: 4KB - Virtual size: 136B

.reloc Size: 4KB - Virtual size: 124B

/14 Size: 4KB - Virtual size: 96B

/29 Size: 4KB - Virtual size: 2KB

/41 Size: 4KB - Virtual size: 594B

/55 Size: 4KB - Virtual size: 437B

/67 Size: 4KB - Virtual size: 148B

/80 Size: 4KB - Virtual size: 44B

.text
Size: 4KB - Virtual size: 1KB

.rodata
Size: 4KB - Virtual size: 572B

.rdata
Size: 4KB - Virtual size: 96B

/4
Size: 4KB - Virtual size: 584B

.edata
Size: 4KB - Virtual size: 752B

.idata
Size: 4KB - Virtual size: 136B

.reloc
Size: 4KB - Virtual size: 124B

/14
Size: 4KB - Virtual size: 96B

/29
Size: 4KB - Virtual size: 2KB

/41
Size: 4KB - Virtual size: 594B

/55
Size: 4KB - Virtual size: 437B

/67
Size: 4KB - Virtual size: 148B

/80
Size: 4KB - Virtual size: 44B