d98f66327f7b4548abc2a452a154175cc7df0baf64c37d1d546ad9dc8d10d7fd | Triage

Sharing

General

Target

d98f66327f7b4548abc2a452a154175cc7df0baf64c37d1d546ad9dc8d10d7fd
Size

248KB
MD5

46d0b73129531db5d366e919885cff04
SHA1

93570d04e57a410374085dd495f99a550451e8c2
SHA256

d98f66327f7b4548abc2a452a154175cc7df0baf64c37d1d546ad9dc8d10d7fd
SHA512

1b5c21964bf693d04d07bb1f960e7ac9ffd4361d571c1292e2cbc7a653092168378771c09f06ec01a9b3582d14cdd22009004eaef41fecafadfbe277ff3a9daa
SSDEEP

3072:Y6sRpXsj2DDca5Tg2/clFaJhyJgrZbONQhVVUvUgqa4r6yqGOCtC9dnBtTXWGwqb:Y6sRp8K8eg2UlE70QZUvUGKIZZtIqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d98f66327f7b4548abc2a452a154175cc7df0baf64c37d1d546ad9dc8d10d7fd

Files

d98f66327f7b4548abc2a452a154175cc7df0baf64c37d1d546ad9dc8d10d7fd
.exe windows:4 windows x86 arch:x86

194bf0ff20bfee4b3c22d168f78145d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragFinish
SHGetMalloc
SHGetFileInfoW
SHFileOperationA
SHChangeNotify
ShellMessageBoxW
DragQueryPoint
SHCreateShellItem
DllUnregisterServer
StrChrW
SHGetDataFromIDListA

odbctrac

TraceSQLConnect
TraceSQLFetch
TraceSQLCancel

kernel32

GetProcessHeap
IsBadStringPtrA
GetComputerNameExA
OutputDebugStringA
CreateDirectoryW
WriteConsoleA
LoadLibraryExA
GlobalAddAtomA
GetModuleHandleA
WaitForSingleObjectEx
GetVolumeNameForVolumeMountPointW
GetSystemTime
GetProcAddress
OpenMutexA
GetStartupInfoA
ReadFile
SetPriorityClass

cmutil

CmRealloc
CmMoveMemory

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_READ