1f22993329a0adf226c8b18c5408b910N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f22993329a0adf226c8b18c5408b910N.exe
Size

160KB
MD5

1f22993329a0adf226c8b18c5408b910
SHA1

816df12bb36e8012445d8d0bef536d4d7aed529e
SHA256

1544cf18a4315deb155b698dea03f51d950914c727e1cdc6828fd9840cd81b78
SHA512

9b1ab1fd4d14667e9d38d5c073df707b2fcef3e129c87757c6d8d8fc842dc7abdc64832301246d74ffa45e8fe06a230ca7819a6e21a979d1657983948303dd06
SSDEEP

3072:I6Q8RbSII+tfe9qYCmo6mihp+6ucIGXBJoZcrKY:jNgcihp+L0ozY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f22993329a0adf226c8b18c5408b910N.exe

Files

1f22993329a0adf226c8b18c5408b910N.exe
.dll windows:6 windows x86 arch:x86

dcf69a78789b9f153a1c5234d07e6d9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

odbcji32.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange

Exports

Exports

DllMain
IntlLibHinst

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ