General

  • Target

    ODAC21.14Xcopy_x64.zip

  • Size

    90.3MB

  • MD5

    3ecf6b3bf582f1a6b968a274fb98d1d5

  • SHA1

    6e69e7936f82e3a1eb53646caa5518a7806b37a7

  • SHA256

    58618195d9a642b539710c8005c9df9662cf01e74674e423347c6c5e8def8440

  • SHA512

    be72448ec5bd6f51c6023ac9625ea312e1a16a0fef8f372078dac2ce22189f3a6aa1d3a0ada521faad7806698f2d332ce221b51c1665be848cb169f2b00a4b74

  • SSDEEP

    1572864:OcLN5P8TlN6fdkeQNU5VMPAnMqQ58EOhU/1qzocCDjrGemjQe6V4D4Ac6zwPEp:3H0TlMFkeZ3oAntQ5tOh/ocCvrJmjQeb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 67 IoCs

    Checks for missing Authenticode signature.

Files

  • ODAC21.14Xcopy_x64.zip
    .zip
  • LICENSE.txt
  • asp.net4/asp.net/bin/4/OraProvCfg.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • asp.net4/asp.net/bin/4/Oracle.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • asp.net4/asp.net/sql/InstallAllOracleASPNETProviders.sql
  • asp.net4/asp.net/sql/InstallOracleASPNETCommon.sql
  • asp.net4/asp.net/sql/InstallOracleASPNETCommonSP.plb
  • asp.net4/asp.net/sql/InstallOracleMembership.sql
  • asp.net4/asp.net/sql/InstallOracleMembershipSP.plb
  • asp.net4/asp.net/sql/InstallOraclePersonalization.sql
  • asp.net4/asp.net/sql/InstallOraclePersonalizationSP.plb
  • asp.net4/asp.net/sql/InstallOracleProfile.sql
  • asp.net4/asp.net/sql/InstallOracleProfileSP.plb
  • asp.net4/asp.net/sql/InstallOracleRoles.sql
  • asp.net4/asp.net/sql/InstallOracleRolesSP.plb
  • asp.net4/asp.net/sql/InstallOracleSessionState.sql
  • asp.net4/asp.net/sql/InstallOracleSessionStateSP.plb
  • asp.net4/asp.net/sql/InstallOracleSiteMap.sql
  • asp.net4/asp.net/sql/InstallOracleSiteMapSP.plb
  • asp.net4/asp.net/sql/InstallOracleWebEvents.sql
  • asp.net4/asp.net/sql/InstallOracleWebEventsSP.plb
  • asp.net4/asp.net/sql/UninstallAllOracleASPNETProviders.sql
  • asp.net4/asp.net/sql/UninstallOracleASPNETCommon.sql
  • asp.net4/asp.net/sql/UninstallOracleMembership.sql
  • asp.net4/asp.net/sql/UninstallOraclePersonalization.sql
  • asp.net4/asp.net/sql/UninstallOracleProfile.sql
  • asp.net4/asp.net/sql/UninstallOracleRoles.sql
  • asp.net4/asp.net/sql/UninstallOracleSessionState.sql
  • asp.net4/asp.net/sql/UninstallOracleSiteMap.sql
  • asp.net4/asp.net/sql/UninstallOracleWebEvents.sql
  • configure.bat
    .bat .vbs
  • install.bat
  • instantclient/BASIC_LICENSE
  • instantclient/BASIC_README
  • instantclient/adrci.exe
    .exe windows:6 windows x64 arch:x64

    4819a4389102d3f391e0223740f5c341


    Headers

    Imports

    Exports

    Sections

  • instantclient/adrci.sym
  • instantclient/genezi.exe
    .exe windows:6 windows x64 arch:x64

    5930da8f8067de60015593328e70257c


    Headers

    Imports

    Sections

  • instantclient/genezi.sym
  • instantclient/network/admin/README
  • instantclient/oci.dll
    .dll windows:6 windows x64 arch:x64

    50ca7bab2d5bda2ea558906d00626f3e


    Headers

    Imports

    Exports

    Sections

  • instantclient/oci.sym
  • instantclient/ocijdbc21.dll
    .dll windows:6 windows x64 arch:x64

    f069ab5262c107e0db601db280ac7f71


    Headers

    Imports

    Exports

    Sections

  • instantclient/ocijdbc21.sym
  • instantclient/ociw32.dll
    .dll windows:6 windows x64 arch:x64

    240372c4a664cac200debc11e2b6e50c


    Headers

    Imports

    Exports

    Sections

  • instantclient/ociw32.sym
  • instantclient/ojdbc11.jar
    .jar
  • instantclient/ojdbc8.jar
    .jar
  • instantclient/oramysql.dll
    .dll windows:6 windows x64 arch:x64

    b8505c78a40b767d332aec8fdba84fe9


    Headers

    Imports

    Exports

    Sections

  • instantclient/oramysql.sym
  • instantclient/orannzsbb.dll
    .dll windows:6 windows x64 arch:x64

    95fdbbd4266d2c39eb569b784ad2199b


    Headers

    Imports

    Exports

    Sections

  • instantclient/orannzsbb.sym
  • instantclient/oraocci21.dll
    .dll windows:6 windows x64 arch:x64

    04f53c7d686fc028cf45e0bc00a21c1f


    Headers

    Imports

    Exports

    Sections

  • instantclient/oraocci21.sym
  • instantclient/oraocci21d.dll
    .dll windows:6 windows x64 arch:x64

    e0e0ef13ebccf9e6b3249f3da5726449


    Headers

    Imports

    Exports

    Sections

  • instantclient/oraocci21d.sym
  • instantclient/oraociei.dll
    .dll windows:6 windows x64 arch:x64

    62c19577b03fe371480b4cab8c811406


    Headers

    Imports

    Exports

    Sections

  • instantclient/oraociei.sym
  • instantclient/orasql.dll
    .dll windows:6 windows x64 arch:x64

    9dac3d3f7fa49faf882b8a10b2eb20da


    Headers

    Imports

    Exports

    Sections

  • instantclient/orasql.sym
  • instantclient/ucp.jar
    .jar
  • instantclient/ucp11.jar
    .jar
  • instantclient/uidrvci.exe
    .exe windows:6 windows x64 arch:x64

    464afe5ec6cd3a1719696b3294b09d77


    Headers

    Imports

    Exports

    Sections

  • instantclient/uidrvci.sym
  • instantclient/xstreams.jar
    .jar
  • network/admin/sample/sqlnet.ora
  • network/admin/sample/tnsnames.ora
  • odp.net4/bin/OraOps.dll
    .dll windows:6 windows x64 arch:x64

    147ca0b63ff0ada7eaf0ab0d0e07d2e9


    Headers

    Imports

    Exports

    Sections

  • odp.net4/odp.net/PerfCounters/register_odpu_perfmon_counters.ps1
    .ps1
  • odp.net4/odp.net/PerfCounters/unregister_odpu_perfmon_counters.ps1
  • odp.net4/odp.net/PublisherPolicy/4/Policy.4.112.Oracle.DataAccess.config
  • odp.net4/odp.net/PublisherPolicy/4/Policy.4.112.Oracle.DataAccess.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • odp.net4/odp.net/PublisherPolicy/4/Policy.4.121.Oracle.DataAccess.config
  • odp.net4/odp.net/PublisherPolicy/4/Policy.4.121.Oracle.DataAccess.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • odp.net4/odp.net/PublisherPolicy/4/Policy.4.122.Oracle.DataAccess.config
  • odp.net4/odp.net/PublisherPolicy/4/Policy.4.122.Oracle.DataAccess.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • odp.net4/odp.net/bin/4/OraProvCfg.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • odp.net4/odp.net/bin/4/Oracle.DataAccess.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • odpm/odp.net/PerfCounters/register_odpm_perfmon_counters.ps1
    .ps1
  • odpm/odp.net/PerfCounters/unregister_odpm_perfmon_counters.ps1
  • odpm/odp.net/managed/PublisherPolicy/4/Policy.4.121.Oracle.ManagedDataAccess.config
  • odpm/odp.net/managed/PublisherPolicy/4/Policy.4.121.Oracle.ManagedDataAccess.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • odpm/odp.net/managed/PublisherPolicy/4/Policy.4.122.Oracle.ManagedDataAccess.config
  • odpm/odp.net/managed/PublisherPolicy/4/Policy.4.122.Oracle.ManagedDataAccess.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • odpm/odp.net/managed/common/Oracle.ManagedDataAccess.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • odpm/odp.net/managed/x64/OraProvCfg.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • odpm/odp.net/managed/x64/Oracle.ManagedDataAccessIOP.dll
    .dll windows:6 windows x64 arch:x64

    3bf00c441bdbfa07db4cf71396cc7bbc


    Code Sign

    Headers

    Imports

    Sections

  • odpm/odp.net/managed/x64/configure.bat
    .bat .vbs
  • odpm/odp.net/managed/x64/unconfigure.bat
  • odpm/odp.net/managed/x86/OraProvCfg.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • odpm/odp.net/managed/x86/Oracle.ManagedDataAccessIOP.dll
    .dll windows:6 windows x86 arch:x86

    155939c8d7701f593179902a2ead486e


    Code Sign

    Headers

    Imports

    Sections

  • odpm/odp.net/managed/x86/configure.bat
    .bat .vbs
  • odpm/odp.net/managed/x86/unconfigure.bat
  • oledb/OraOledbIC.dll
    .dll windows:6 windows x64 arch:x64

    f22f3aa7b5d04cdfb2fab2c412092350


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/OraOLEDB.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    7118bd382bdf69b36513fc534a79753b


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/OraOLEDB.tlb
  • oledb/bin/OraOLEDBd.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/OraOLEDBgmr.dll
    .dll windows:6 windows x64 arch:x64

    46c571cbd9389985eb8eb29ed76dae59


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/OraOLEDBja.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/OraOLEDBko.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/OraOLEDBpus.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/OraOLEDBrfc.dll
    .dll windows:6 windows x64 arch:x64

    1aec0599a8e23b1c4b48f38d0f6972d7


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/OraOLEDBrmc.dll
    .dll windows:6 windows x64 arch:x64

    60e540a99326b3675eb7544843501e39


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/OraOLEDBrst.dll
    .dll windows:6 windows x64 arch:x64

    d52753afac164b85f6c5f15758b0f2cd


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/OraOLEDBus.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/OraOLEDButl.dll
    .dll windows:6 windows x64 arch:x64

    1a1eafc8cb1cc3da4cf4ae2eb597be6b


    Headers

    Imports

    Exports

    Sections

  • oledb/bin/oraoledbe.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/oraoledbf.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/oraoledbi.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/oraoledbptb.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/oraoledbzhs.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledb/bin/oraoledbzht.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledbolap/OraOledbOlapIC.dll
    .dll windows:6 windows x64 arch:x64

    f22f3aa7b5d04cdfb2fab2c412092350


    Headers

    Imports

    Exports

    Sections

  • oledbolap/bin/OraOLEDBOLAP.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    0961981ead09cf2e393ff08ba2dfe1d2


    Headers

    Imports

    Exports

    Sections

  • oledbolap/bin/OraOLEDBOLAPcst.dll
    .dll windows:6 windows x64 arch:x64

    5cfe438ed51f20c1ac3d02fbd033519f


    Headers

    Imports

    Exports

    Sections

  • oledbolap/bin/OraOLEDBOLAPpus.dll
    .dll windows:6 windows x64 arch:x64

    f376c139d227820a477eddd0952e6965


    Headers

    Imports

    Sections

  • oledbolap/bin/OraOLEDBOLAPrfc.dll
    .dll windows:6 windows x64 arch:x64

    1d292594aa635099c513acc3c1f3c947


    Headers

    Imports

    Exports

    Sections

  • oledbolap/bin/OraOLEDBOLAPrmc.dll
    .dll windows:6 windows x64 arch:x64

    96e869be15644c8ef4f87693467afaa8


    Headers

    Imports

    Exports

    Sections

  • oledbolap/bin/OraOLEDBOLAPrst.dll
    .dll windows:6 windows x64 arch:x64

    a07ca104c3d928b0b0df0295ea72e429


    Headers

    Imports

    Exports

    Sections

  • oledbolap/bin/OraOLEDBOLAPus.dll
    .dll windows:6 windows x64 arch:x64

    d39a30724952849d8c0acb3ae459738d


    Headers

    Imports

    Sections

  • oledbolap/bin/OraOLEDBOLAPutl.dll
    .dll windows:6 windows x64 arch:x64

    44017503f5bd6c79d74d26358bc92c47


    Headers

    Imports

    Exports

    Sections

  • oramts/bin/omtsreco.exe
    .exe windows:6 windows x64 arch:x64

    61d5812cf17c344172cae913ab55063b


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoeentd.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoeente.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoeentf.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoeventd.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevente.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntd.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevnte.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntf.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevnti.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntja.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntko.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntptb.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntus.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntzhs.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecoevntzht.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/omtsrecomsgus.dll
    .dll windows:6 windows x64 arch:x64

    17168e3cca9a3f545c7d0901ad93f547


    Headers

    Imports

    Sections

  • oramts/bin/oramts.dll
    .dll windows:6 windows x64 arch:x64

    40dd7b6e1aa91d35b0f0dfc194782a11


    Headers

    Imports

    Exports

    Sections

  • oramts/bin/oramtsus.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • oramts/oramts/admin/oramtsadmin.sql
  • oramts/oramts/admin/prvtoramts.plb
  • oramts/oramts/admin/utl_oramts.sql
  • oramts/oramts/doc/readme.txt
  • oramts/oramts/install/genreg.bat
  • oramts/oramts/mesg/omtsus.msb
  • readme.htm
    .html
  • unconfigure.bat
    .bat .vbs
  • uninstall.bat