061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777

Sharing

Copy URL Twitter E-mail

General

Target
061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777
Size 110KB
Sample261110-fp6vpada39
SHA256 061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777
MD5 a56dbb0724406d99e2ff061c1eb8115c
SHA1 409dad1d9d24560bc50cc3273ae652620b3af4c8
SHA512 bdd3f125d93d9a89698abccb6603215cd80ea141c32d18ee51227d78ed188beb3e9441ae78a3360b9957e01fff26af4757fd959bdb204b328eba8c1a89d5c918
SSDEEP 1536:eYEwrd48ou+VJJViH0vXCurlx/g4y4gg:eYEGdVL+Vz4UvXCurlJg4y4gg
TLSH
T16EB3B5733487CE77E9E7367B9EFD299062ECD4111B6D25C3A488420A8B112F72B395D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777

File Explorer

061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777

.exe 110KB

061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777

IMPHASH 3a8a98a4f7a9e5c51d977d7208e65223
SHA256 061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777
MD5 a56dbb0724406d99e2ff061c1eb8115c
SHA1 409dad1d9d24560bc50cc3273ae652620b3af4c8
SHA512 bdd3f125d93d9a89698abccb6603215cd80ea141c32d18ee51227d78ed188beb3e9441ae78a3360b9957e01fff26af4757fd959bdb204b328eba8c1a89d5c918
SSDEEP 1536:eYEwrd48ou+VJJViH0vXCurlx/g4y4gg:eYEGdVL+Vz4UvXCurlJg4y4gg
TLSH
T16EB3B5733487CE77E9E7367B9EFD299062ECD4111B6D25C3A488420A8B112F72B395D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69732

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\assemblage\Builds\2628170239990186053tnxzbnvwzv\KDBMS-master\KDBDMS_test\assemblage_outdir_bin\KDBDMS_test.pdb

kdbms

??0Attributes@@QAE@_N00@Z ?ToString@Attributes@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??0Data@@QAE@W4Type@@_K@Z ??0Data@@QAE@G@Z ??0Data@@QAE@_K@Z ??0Data@@QAE@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0TableColumn@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@@UAttributes@@@Z ?Serialize@TableColumn@@UAE?AUSerializedObject@@XZ ?Deserialize@TableColumn@@UAE_NUSerializedObject@@@Z ??0TableRow@@QAE@PAV?$vector@UTableColumn@@V?$allocator@UTableColumn@@@std@@@std@@V?$vector@TData@@V?$allocator@TData@@@std@@@2@@Z ?Serialize@TableRow@@UAE?AUSerializedObject@@XZ ?Deserialize@TableRow@@UAE_NUSerializedObject@@@Z ?ToString@TableRow@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??0Response@@QAE@XZ ?Insert@Table@@QAE?AUResponse@@PAUTableRow@@@Z ?Select@Table@@QAE?AUResponse@@PAUCondition@@@Z ?Update@Table@@QAE?AUResponse@@PAUCondition@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@TData@@@Z ?Delete@Table@@QAE?AUResponse@@PAUCondition@@@Z ?Serialize@Table@@UAE?AUSerializedObject@@XZ ?Deserialize@Table@@UAE_NUSerializedObject@@@Z ?ToString@Table@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??0Condition@@QAE@PAUTable@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@TData@@W4Comparison@@PAU0@4@Z ?CreateTable@Database@@QAE?AUResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV?$vector@UTableColumn@@V?$allocator@UTableColumn@@@std@@@4@@Z ?FindTable@Database@@QAE?AUResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?SaveToFile@Database@@QAE?AUResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?LoadFromFile@Database@@QAE?AUResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?Serialize@Database@@UAE?AUSerializedObject@@XZ ?Deserialize@Database@@UAE_NUSerializedObject@@@Z ?ToString@Database@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??0Manager@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?CreateDatabase@Manager@@QAE?AUResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?DropDatabase@Manager@@QAE?AUResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?ToString@Manager@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

msvcp140d

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?width@ios_base@std@@QBE_JXZ ?flags@ios_base@std@@QBEHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?good@ios_base@std@@QBE_NXZ ?_W_Getmonths@_Locinfo@std@@QBEPBGXZ ?_W_Getdays@_Locinfo@std@@QBEPBGXZ ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ?width@ios_base@std@@QAE_J_J@Z _Mbrtowc ?_Xlength_error@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?uncaught_exception@std@@YA_NXZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z

vcruntime140d

_except_handler4_common __current_exception_context __current_exception memset memcpy __CxxFrameHandler3 _CxxThrowException __std_exception_destroy _purecall __std_type_info_destroy_list memmove __std_exception_copy

ucrtbased

_crt_at_quick_exit _cexit _seh_filter_exe _set_app_type __setusermatherr _get_initial_narrow_environment _initterm _initterm_e exit _exit _set_fmode __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _configthreadlocale _set_new_mode __p__commode _free_dbg _controlfp_s _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll malloc _callnewh terminate system _CrtDbgReport _calloc_dbg _invalid_parameter _execute_onexit_table

kernel32

InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter TerminateProcess GetCurrentProcess GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCurrentThreadId

??0Attributes@@QAE@$$QAU0@@Z ??0Attributes@@QAE@ABU0@@Z ??0Database@@QAE@$$QAU0@@Z ??0Database@@QAE@ABU0@@Z ??0Enum@@QAE@$$QAU0@@Z ??0Enum@@QAE@ABU0@@Z ??0Enum@@QAE@XZ ??0Manager@@QAE@$$QAU0@@Z ??0Manager@@QAE@ABU0@@Z ??0Printable@@QAE@$$QAU0@@Z ??0Printable@@QAE@ABU0@@Z ??0Printable@@QAE@XZ ??0Serializeable@@QAE@$$QAU0@@Z ??0Serializeable@@QAE@ABU0@@Z ??0Serializeable@@QAE@XZ ??0Table@@QAE@$$QAU0@@Z ??0Table@@QAE@ABU0@@Z ??0TableColumn@@QAE@$$QAU0@@Z ??0TableColumn@@QAE@ABU0@@Z ??0TableRow@@QAE@$$QAU0@@Z ??0TableRow@@QAE@ABU0@@Z ??1Database@@QAE@XZ ??1Enum@@QAE@XZ ??1Manager@@QAE@XZ ??1Table@@QAE@XZ ??1TableColumn@@QAE@XZ ??1TableRow@@QAE@XZ ??4Attributes@@QAEAAU0@$$QAU0@@Z ??4Attributes@@QAEAAU0@ABU0@@Z ??4Condition@@QAEAAU0@$$QAU0@@Z ??4Condition@@QAEAAU0@ABU0@@Z ??4Data@@QAEAAT0@$$QAT0@@Z ??4Data@@QAEAAT0@ABT0@@Z ??4Database@@QAEAAU0@$$QAU0@@Z ??4Database@@QAEAAU0@ABU0@@Z ??4Date@@QAEAAU0@$$QAU0@@Z ??4Date@@QAEAAU0@ABU0@@Z ??4DateTime@@QAEAAU0@$$QAU0@@Z ??4DateTime@@QAEAAU0@ABU0@@Z ??4Enum@@QAEAAU0@$$QAU0@@Z ??4Enum@@QAEAAU0@ABU0@@Z ??4Manager@@QAEAAU0@$$QAU0@@Z ??4Manager@@QAEAAU0@ABU0@@Z ??4Printable@@QAEAAU0@$$QAU0@@Z ??4Printable@@QAEAAU0@ABU0@@Z ??4Response@@QAEAAU0@$$QAU0@@Z ??4Response@@QAEAAU0@ABU0@@Z ??4Serializeable@@QAEAAU0@$$QAU0@@Z ??4Serializeable@@QAEAAU0@ABU0@@Z ??4SerializedObject@@QAEAAU0@$$QAU0@@Z ??4SerializedObject@@QAEAAU0@ABU0@@Z ??4Table@@QAEAAU0@$$QAU0@@Z ??4Table@@QAEAAU0@ABU0@@Z ??4TableColumn@@QAEAAU0@$$QAU0@@Z ??4TableColumn@@QAEAAU0@ABU0@@Z ??4TableRow@@QAEAAU0@$$QAU0@@Z ??4TableRow@@QAEAAU0@ABU0@@Z ??4Time@@QAEAAU0@$$QAU0@@Z ??4Time@@QAEAAU0@ABU0@@Z ??_7Attributes@@6B@ ??_7Database@@6BPrintable@@@ ??_7Database@@6BSerializeable@@@ ??_7Manager@@6B@ ??_7Printable@@6B@ ??_7Serializeable@@6B@ ??_7Table@@6BPrintable@@@ ??_7Table@@6BSerializeable@@@ ??_7TableColumn@@6B@ ??_7TableRow@@6BPrintable@@@ ??_7TableRow@@6BSerializeable@@@ ??_FAttributes@@QAEXXZ ??_FData@@QAEXXZ

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

425B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

061d764f85d0b5d19c8ddf35b2cb5dfd7174a612839f609af7ce6eb6edb47777

kdbms

msvcp140d

vcruntime140d

ucrtbased

kernel32

generic