2e1f5d5a74b7da8a421c82ef8433b431f2d40aff42ea1092ed914e833e394f66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1f5d5a74b7da8a421c82ef8433b431f2d40aff42ea1092ed914e833e394f66
Size

812KB
MD5

a33a75e221082e683555f57715deda80
SHA1

55eb1d06aefca372e9311e781f93e9296a8df186
SHA256

2e1f5d5a74b7da8a421c82ef8433b431f2d40aff42ea1092ed914e833e394f66
SHA512

7a37b0543b9d95ab05a9b2f605a0061427bedbe86b07b4a77a1c442db73e578bb671ba0fd236cf27620afa4f59846d0679acf534476f7288ea10eedd692fa6c0
SSDEEP

24576:vCXYKESzdj5kwRPxH8m43tvvgAaY4WJnHj0:vCZzdj5lV29gAoWJ

Score

N/A

Malware Config

Signatures

Files

2e1f5d5a74b7da8a421c82ef8433b431f2d40aff42ea1092ed914e833e394f66
.exe windows x86

daea0691e5d94f8f2ef0ddfa633a8ea2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
GetLogicalDrives
GetFileAttributesA
GetLogicalDrives
LoadLibraryA
GetLogicalDrives
GetVersion
GetLogicalDriveStringsW
OpenMutexW
CreateEventA
GetStringTypeA
GetLogicalDrives
VirtualProtect
GetLogicalDrives
SetCurrentDirectoryW
lstrcpyW

sqlsrv32

SQLBindCol
SQLCancel
SQLFetch
SQLDisconnect

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE