47e6f9a838c0df132009b1e52aa75b50N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

47e6f9a838c0df132009b1e52aa75b50N.exe
Size

134KB
MD5

47e6f9a838c0df132009b1e52aa75b50
SHA1

58b0444306194c0fc9961522bc955119e2db5e34
SHA256

880f68cca2c647ce06bd9b1c5433b1d30de59eb0f627cfe7d65bc0a1f77fe000
SHA512

ea4a4c23776cf1c346fe13dc2dbe0d0435d983c88c2014ac4166eead4a5713833bef914689c7ba9e793b1e8278770f40e8cf14ab94a2b210e71232425fad4061
SSDEEP

1536:Kk8rnvchz9W33LbSt7UIiC3coVwDddILBjumu8CTkM0I/IOnWTJGEAOlzaMn5MKz:Kk2B7CszRJoM0I/IIpb5BvXTiP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47e6f9a838c0df132009b1e52aa75b50N.exe

Files

47e6f9a838c0df132009b1e52aa75b50N.exe
.dll windows:4 windows x86 arch:x86

fd0eecf94c8cec00659573889ccd9e01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mpr

WNetEnumResourceA
WNetAddConnectionA
WNetOpenEnumA
WNetCloseEnum
WNetGetConnectionA

comctl32

ImageList_GetImageCount
ImageList_Create
ImageList_Add
ord17

kernel32

lstrcpynA
lstrcatA
lstrlenA
GetCurrentDirectoryA
lstrcpyA
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
GetProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
GetTempFileNameA
GetTempPathA
DeleteFileA
GlobalCompact
lstrcmpiA
GlobalFree
GlobalAlloc
IsDBCSLeadByte
lstrcmpA

user32

DialogBoxParamA
CreateWindowExA
GetWindowTextA
EndDialog
MapDialogRect
GetDlgItem
SendMessageA
SetWindowTextA
MessageBeep
CharLowerA
GetSystemMetrics
CharNextA
LoadStringA
GetWindowTextLengthA
LoadBitmapA
LoadCursorA
SetCursor
OemToCharA
GetActiveWindow
GetDlgItemInt
SetFocus
wsprintfA
MessageBoxA

gdi32

DeleteObject

comdlg32

GetOpenFileNameA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

msvcirt

??5istream@@QAEAAV0@PAD@Z

msvcrt

_makepath
strcmp
mktime
_itoa
_onexit
__dllonexit
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
tolower
memcmp
_mbctoupper
wcstombs
mbstowcs
_fullpath
_ismbcprint
_strcmpi
_memicmp
strcat
sprintf
memmove
atof
strrchr
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
strlen
__CxxFrameHandler
toupper
_ftol
atoi
_purecall
_splitpath
fclose
strtok
localtime
fwrite
ftell
memcpy
fgetc
_strlwr
fopen
free
_access
fseek
fread
memset
malloc
realloc

Exports

Exports

PhysSQLVersionNumber
SQLBuildAndExecSQLQueryVer110
SQLCanBuildIndex
SQLCanFetchDataFileIndexInfo
SQLCanFetchDataFileInfo
SQLCanFetchNRecurringRecords
SQLCanReadRangeOfValues
SQLCanReadSortedOrder
SQLCanRecognizeDataFile
SQLCanUseFileLocking
SQLCanUseRecordLocking
SQLChooseSQLTable
SQLCloseDataFile
SQLFetchDataFileIndexInfo
SQLFetchDataFileInfo
SQLFetchDatabaseNameVer17
SQLFetchDatabasebitmap
SQLFetchJoinOptionInfo
SQLFetchMemoField
SQLFetchPersistentMemoField
SQLFetchTableNameListVer19
SQLFreeDataFileIndexInfo
SQLFreeDataFileInfo
SQLFreeDatabaseNameVer17
SQLFreeDatabasebitmap
SQLFreeJoinOptionInfo
SQLFreeMemoField
SQLFreePersistentMemoField
SQLFreeSQLQueryVer110
SQLFreeTableNameList
SQLInitPhysicalDatabase
SQLLogOffSQLServer
SQLLogOnSQLServerVer16
SQLLogOnSQLServerWithExtendableOptions
SQLLogOnSQLServerWithPrivateInfo
SQLLookupMatchingRecurringRecord
SQLNRecurringRecordsToRead
SQLOpenDataAndIndexFileIfRecog
SQLOpenDataFileAndIndexChoice
SQLOpenDataFileIfRecognizedVer19
SQLReadFlatRecord
SQLReadNextRecurringRecord
SQLServerCompatible
SQLTermDataFileForReading
SQLTermPhysicalDatabase
SQLUseFileLocking
SQLUseRecordLocking

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd0eecf94c8cec00659573889ccd9e01

Headers

File Characteristics

Imports

mpr

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

msvcirt

msvcrt

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB