a88d43a8369c0082de0e5a3c16c36a896f4d6cdcecf0e73f35fe220924110197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a88d43a8369c0082de0e5a3c16c36a896f4d6cdcecf0e73f35fe220924110197
Size

812KB
MD5

513ec8f4a8e262b8035b486a2922c860
SHA1

315ab3f1023a040a6a3812e5678da08e575a7641
SHA256

a88d43a8369c0082de0e5a3c16c36a896f4d6cdcecf0e73f35fe220924110197
SHA512

bec3b1a424ad6c5e6fe29c46e8a8286fa94c3961a0ac40b0a6e658c6d6442104e41780613a7108bda7205a03188d2b4b16dd37240d9e0af769d5c6db00bcd8b4
SSDEEP

24576:S1m62FXH7TmS1FW+knR92Gmg6SomDWQUm8k0LVHJ:pLF3v5FW++/hWmDWQVq

Score

N/A

Malware Config

Signatures

Files

a88d43a8369c0082de0e5a3c16c36a896f4d6cdcecf0e73f35fe220924110197
.exe windows x86

bd62095cef315058a3abd77977f7bde4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStringTypeA
GetLogicalDrives
GetFileAttributesA
GetVersion
GetLogicalDriveStringsW
GetLogicalDrives
LoadLibraryA
OpenMutexW
GetStdHandle
GetLogicalDrives
GetLogicalDrives
SetCurrentDirectoryW
lstrcpyW
VirtualProtect
GetLogicalDrives
CreateEventA

sqlsrv32

SQLCancel
SQLFetch
SQLDisconnect
SQLBindCol

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE