564f560df72c0ef3ec839b11a7957b23197feff145dce66b8bad98d279714f4e

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2018-Dec-30 13:36:02
CompanyName Modern Soft
FileDescription Database
FileVersion 2.5.5.0
InternalName Database.exe
LegalCopyright Copyright © bconnect 2011
OriginalFilename Database.exe
ProductName Database
ProductVersion 2.5.5.0
Assembly Version 1.0.0.0

Plugin Output

Malicious VirusTotal score: 5/70 (Scanned on 2022-08-19 00:35:53) APEX: Malicious
Cybereason: malicious.d4dfc1
Rising: Trojan.Generic/MSIL@AI.94 (RDM.MSIL:3KIf3hasPpcut1C0h0GG9w)
SentinelOne: Static AI - Suspicious PE
Trapmine: suspicious.low.ml.score

Hashes

MD5 471813026fd2296bb06a4cc62b01533c
SHA1 992739cd4dfc1889c6510c4b0b061a6c835bd804
SHA256 564f560df72c0ef3ec839b11a7957b23197feff145dce66b8bad98d279714f4e
SHA3 61c99c57048c1e202b4ba9452b215087ef08e6b2135d6951ac85fb4572296c29
SSDeep 12288:BmjBBdYs+YUttzUBBNYs0sYtvmjBRPYsqiMtv:ctBVQ8BlUwtRvoZ
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2018-Dec-30 13:36:02
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0x70800
SizeOfInitializedData 0x36400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0003CB4C (Section: .text)
BaseOfCode 0x3a000
BaseOfData 0x2000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xae000
SizeOfHeaders 0x200
Checksum 0xadaa2
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_NO_SEH
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.rsrc

MD5 387a28edb0aeb5b39cd7c7185b0984f4
SHA1 dbee6b4c37d2de3a72f07461f3eefe2072281255
SHA256 3d2c0d4310a1c440cd0d3b7cc47074a9e4965a6795b628e220f47d280d28682d
SHA3 f50beee84d97fabe3a1b04546b8d9773bbf8da1e2733711131366a3123e55ea9
VirtualSize 0x36028
VirtualAddress 0x2000
SizeOfRawData 0x36200
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.89026

.text

MD5 5316f31222f3bebe063679b343055fe4
SHA1 7bd7074a79d62de899e8d66c522a8ae686211c7c
SHA256 cbb788d9c548dbb59a568fdf460336a2106f08e7a3f1d327c0d8addcb8837748
SHA3 c974dd36c80680ca332b627079c140126b6855a0c6b4c7f97f745506b7be8f63
VirtualSize 0x707d4
VirtualAddress 0x3a000
SizeOfRawData 0x70800
PointerToRawData 0x36400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.95078

.reloc

MD5 61bc5c7d2f3c6101a38543e0168833df
SHA1 9d6f68d9580648c41694d5a3d84b520a33dfc2e0
SHA256 8d9549ef310e097a766e768707ef1bdb71c2e3907e135793c7e9c93353206295
SHA3 28faa348eec4ecf760532f61842371c2a1722c66fc2080fa247917de2aa2badb
VirtualSize 0xc
VirtualAddress 0xac000
SizeOfRawData 0x200
PointerToRawData 0xa6c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.122276

Imports

mscoree.dll _CorExeMain

Delayed Imports

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.57473
MD5 8796a772a8d4bfcd73b9b0d648b7ca2b
SHA1 dff9fa239e7f0fc432c8d253bc81c8f2e3484de8
SHA256 e34cc6df83cd94593bcd87d60d9e19f8fc5cc9c921f897aae0a2f58482ffadd0
SHA3 d4d06c3d68c76d156bf2023561df1d0b4683e610012862a050fa7f04aa51789a

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.74726
MD5 c169ce5d2d513e520241624785131ffb
SHA1 05b057a2e468e37b9b1c1471bce8667294b45abe
SHA256 f175e03da814f23d337e6ede0d80a1d267d9b1d738233cf80a279d52f8a90b82
SHA3 e40f1adef74bbd61736feefcd7d468096768ae443c720f11bcacb4810220c9c7

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27371
MD5 f7826760faedab212a85e61d0d907a37
SHA1 eef22a6e6d028101ca7691e53f1d9acbb6919cd2
SHA256 c26d251c4de7beebfbd50630726349130a7eac492d7bada894f0e602a5c99070
SHA3 028a7eff6aac620ad58b34b8711196219a5235fae1c742998fbb4307d77e1e9b

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.27844
MD5 d52a8a5822e9d5270a89cedc57bf15d2
SHA1 866ec15356905ffa98cb5be798477116c44892b4
SHA256 92f340fd48d333d4fd751c39c85dbb9b60721d78d9619ba19d912f608433a7fe
SHA3 65410371903e78b94aca5985497f41c14ad27069dc00011e72519e37d4de067f

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.65561
MD5 a223a33c151a6b6acceab533714c67e7
SHA1 84bfc243b2bc05fb6e117245e1baae5046fd7673
SHA256 f1a3fce2a5f4b0bbb0d82277be6e6197513f3c024bbc74916a271bd6db6e9d6a
SHA3 16cb045e3bd6a330e6952c1f0e0fb6cf12ba0dfce0f567c2c40b5c18495f8685

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.39406
MD5 ac7ec3b1a99d65168f0b0c1e12b36f68
SHA1 e1f8b934948aaafede2894a1da6689a6b8c6ab4e
SHA256 86daf265a4925c04a9303ae72d9d97a2d123beedc9cbe17bf1e9db6fc54dfb42
SHA3 edada79ad68beb21222f0715da7e86d755989b2e328b4111a70b1480f1a59107

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1162e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98957
Detected Filetype PNG graphic file
MD5 dc1ddf5631d61f4f1cbee1c2686f46e9
SHA1 afd54ad1e33587a8b1285decfa29685f8e18c599
SHA256 db0ded7b98cce8056768591b28017d59f9c57980b026c5d5a23c7b56208088d1
SHA3 6b9c73d6910783361f4af81a848d60de367ed43d6482ec93fc6843b4e9708b95

9

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.91545
MD5 e5b0641d458709bcf0708ccffe4bca81
SHA1 b0e7bfc3f6e8d9d32a00a6a19cc5d4beda0e003f
SHA256 835d5a2576587181272744a6b63efccf3df0c1f303b6d2ec53e3475950787762
SHA3 f08fb6bf820081d3f29a3f128719913f0a389a00e81b605acdcc67a08aec74a9

10

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.96721
MD5 d2fa1068d8a49428096a93e1856f5f70
SHA1 09b89fb0c06a5f4c9780bc68826f2472f64accc4
SHA256 8795b0fd570a114189052f7ff5fea256de19cdcf4e41e1203f802791b8af136a
SHA3 4d931f75b00316a75773ea0ebb5b996815b1b2e1cefc5939e58dd1201ecf7725

11

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.05712
MD5 09c75a03b2c1ab4273a83afe602be36b
SHA1 a45585accc515c6f89a3ac12cd78119f9f98f5db
SHA256 6e86223d5de491b12ca63b0c82a792596ff33373894a62f453fd31afc5143c12
SHA3 a0ca7fb2c21e20a4b19cd2da6faac195e5713dff166d0731e0e51263f22cc4db

12

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.09589
MD5 22e575a7738ab3f417b388ef04ebfc7c
SHA1 58db74fa69a980e6590c397be1623913f8515211
SHA256 7089bfc6071c4e94a322a6da67f2f0e42c80d80ffa0d15440e451ead8a67129a
SHA3 35404c9bbc6c807a0a054744e08317fee85c0bbb45d5abce2fb9aff0771800c8

13

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.13385
MD5 49d6125e302646b2e2c7e04c05bf1eb4
SHA1 a76ce68592d3ac93db5e661e753a6dd790f7625e
SHA256 eaecf2bfa7d4b336a0cdc389f702e860d26126201d935b4cbcc463e0e9804378
SHA3 9383e7c031420eb2d25f080548cf6e0c7f24d0537fdb087a655926d45cfd20d1

14

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15184
MD5 e417a754b62a715e68bc387053937b9d
SHA1 bb7737ccf5289bb441e328fa6c84b85fe95e8a2e
SHA256 64cb62246dbfac5a5b06c1320a95f1ed724bfff160d94923f7345de91c6e10e3
SHA3 7e3817159733d14a3d1d16d0c6844770921476a3b43e609f729c52521161a97f

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xbc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.13582
Detected Filetype Icon file
MD5 dcfd6b0315962a9854ce335b02bbd73b
SHA1 7d541b0f03f2178ba0cd7e82f3d829a9bf35c089
SHA256 6e7613e8d6a6c05bc3b09a5a83c930a177ba73c974dd5d5619ac97a707e2550c
SHA3 b310ec6c3c3404120432c55b5b0485a98bfca49ebd7c69a9025fd80266b577b3

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x2f8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32589
MD5 cd0ce5744641a9f103a301227d6baa9f
SHA1 afd4ea696977b8068ba132abf55e8a4665dea521
SHA256 efe659c233875a92cf91ed39e02b89c864b292b78121584bcd6221f1a5ac0fd9
SHA3 8399c2015d670c481eace4a953ea4941350f76bfa1e0e65241489d17967291f1

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 a19a2658ba69030c6ac9d11fd7d7e3c1
SHA1 879dcf690e5bf1941b27cf13c8bcf72f8356c650
SHA256 c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f
SHA3 93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.5.5.0
ProductVersion 2.5.5.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
CompanyName Modern Soft
FileDescription Database
FileVersion (#2) 2.5.5.0
InternalName Database.exe
LegalCopyright Copyright © bconnect 2011
OriginalFilename Database.exe
ProductName Database
ProductVersion (#2) 2.5.5.0
Assembly Version 1.0.0.0
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.