248cc03935470663b0b9588e391ca947c2f2b403ea04fe184d2b73e4bb242a0b | Triage

Sharing

General

Target

248cc03935470663b0b9588e391ca947c2f2b403ea04fe184d2b73e4bb242a0b
Size

160KB
MD5

c103e882e318fb7bcda21833d331a311
SHA1

fa8cacbeb5bf1c486a58f25953d4100befb2fee3
SHA256

248cc03935470663b0b9588e391ca947c2f2b403ea04fe184d2b73e4bb242a0b
SHA512

d5538ef023eacad7e5bc937768da005c0f6e5462bf71fd46cc8e9dc0145d3ed5d3fb9660a595ef0874cf23292ed68f9dde9a89982fe5fc756027a919fb29bc5b
SSDEEP

3072:yIk3RbSYmZkbIUjYCmohSihpbsTgIaXBJVIcvI6z7ml:sNz2ihpbUYVYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248cc03935470663b0b9588e391ca947c2f2b403ea04fe184d2b73e4bb242a0b

Files

248cc03935470663b0b9588e391ca947c2f2b403ea04fe184d2b73e4bb242a0b
.dll windows:6 windows x86 arch:x86

c042dc5285d88b7e542fff1fc34e4ef4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

oddbse32.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
MultiByteToWideChar
InterlockedExchange

odbcjt32

ord514

Exports

Exports

ConfigDSNW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ