566ec18eeef7b64223f57f1e25efd7f312b745dc279fe0261176077676b89180 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

566ec18eeef7b64223f57f1e25efd7f312b745dc279fe0261176077676b89180
Size

57KB
MD5

04fa33e1072def990f7b6dfb9536da77
SHA1

84f300ba788bed584e175a20c89eee449d4b7b06
SHA256

566ec18eeef7b64223f57f1e25efd7f312b745dc279fe0261176077676b89180
SHA512

173012f0022dbfbb209a5dd648c6b2637b66156e8355be40c95732ea85ab8373dede1278d22059ddf97f55d95466d83e05d2b2030c5d357e07e764def7d84eff
SSDEEP

1536:FnqroklVxEw3hJsphpGqV6tfTq6SB1Tqiy:FqrZVGw32hpBeEBF

Score

N/A

Malware Config

Signatures

Files

566ec18eeef7b64223f57f1e25efd7f312b745dc279fe0261176077676b89180
.exe windows x86

d1f2bea9648e73049c1511a6ce8dfb33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
lstrcmpiA
GetExitCodeProcess
GetModuleHandleA
SetLastError
GetStdHandle
GetBinaryTypeW
lstrcmpiA
Sleep
GetDriveTypeA
SuspendThread
CreateNamedPipeA
lstrlenA
lstrcmpiA
GetProcessHeap
lstrcmpiA
lstrcmpiA
EndUpdateResourceW
HeapCreate
GetLogicalDrives
FileTimeToLocalFileTime
CreateWaitableTimerW
IsValidCodePage

odbctrac

TraceSQLConnect
TraceVersion
TraceSQLError
TraceSQLCancel

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE