192165e3dfb0b3ab25e277a6991d29b2385f7dec4bba15ca618b6097b58ce0d3N | Triage

Sharing

General

Target

192165e3dfb0b3ab25e277a6991d29b2385f7dec4bba15ca618b6097b58ce0d3N
Size

3.3MB
MD5

ac6622e121f55e54aad4fdf324f203d0
SHA1

ad09ce14783bbecffb5dac29fc222754f6f70bf7
SHA256

192165e3dfb0b3ab25e277a6991d29b2385f7dec4bba15ca618b6097b58ce0d3
SHA512

9c7d8e5725684c380833536417f5302dd4424e1ce5bace17a5b8f71adefdbd1c8ce393841cd92b9215297932fba4e60a27b7f0671fb0375af80babfaf1eaafb7
SSDEEP

49152:NOdk/c8MNF/OkiwnNTB4akOElMaFLk7WWhipXq:v/cZRiak7ro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
192165e3dfb0b3ab25e277a6991d29b2385f7dec4bba15ca618b6097b58ce0d3N

Files

192165e3dfb0b3ab25e277a6991d29b2385f7dec4bba15ca618b6097b58ce0d3N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SqlDumper.pdb

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ