0487ed02a97551ffb340600d4ba30d672d58994a04d34445dd7e476340953c3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0487ed02a97551ffb340600d4ba30d672d58994a04d34445dd7e476340953c3f
Size

812KB
MD5

6fefe90986a5ac9a987964321e793bf1
SHA1

3054432aa2d7dd48ed51e25c10c150c7d0d515bb
SHA256

0487ed02a97551ffb340600d4ba30d672d58994a04d34445dd7e476340953c3f
SHA512

5885431e9968a12a1c7c086dcd9a4fa182eec7027f10a8fd586973f03f143d450182f48fbada8c1e780640d0487a84c46ed3c6cebd4fc796fd3cacf070cf69ab
SSDEEP

12288:S/tDH1PGJyVIfiXXwDEOia99vPjpUKbgeNhvNMMlsKN1zlKCJtrFGzuVa2M3Omrt:wDZVI6XXXd6SKbHt4CJtrFynOmB

Score

N/A

Malware Config

Signatures

Files

0487ed02a97551ffb340600d4ba30d672d58994a04d34445dd7e476340953c3f
.exe windows x86

fc422d4d194debca77f75a9e03d5be58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
LoadLibraryA
lstrcpyW
GetLogicalDrives
GetLogicalDriveStringsW
GetStdHandle
OpenMutexW
GetFileAttributesA
GetLogicalDrives
CreateEventA
GetLogicalDrives
GetVersion
GetLogicalDrives
GetStringTypeA
SetCurrentDirectoryW
GetLogicalDrives

sqlsrv32

SQLCancel
SQLDisconnect
SQLFetch
SQLBindCol

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE