General

  • Target
    duckdb.exe
  • Size 35.3MB
  • Sample260727-qckrssfl4w
  • SHA256 7faeaad223c6df0d6a85792a92c95d89029c0fea86f6588e9b34f8c3892303f7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • duckdb.exe
    .exe 35.3MB

duckdb.exe

  • IMPHASH 98ccb12fa52f6f5081f9cbc8af7e7600
  • SHA256 7faeaad223c6df0d6a85792a92c95d89029c0fea86f6588e9b34f8c3892303f7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c3:cf:00:74:0b:dc:e2:2a:d2:bf:9a:6d:6c:1d:02:33:03:08:12:a3:de:a3:e7:f8:ae:09:8f:64:ff:eb:9f:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Stichting DuckDB Foundation,O=Stichting DuckDB Foundation,L=Amsterdam,C=NL
Minor OS version
0
Major OS version
6
Entry point
25465024
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths