08d3c8dd37d2cc511cf19fdce050fb5cd39da5bebc5a82254ecc0dfe986dfcc6

Sharing

Copy URL Twitter E-mail

General

Target

08d3c8dd37d2cc511cf19fdce050fb5cd39da5bebc5a82254ecc0dfe986dfcc6
Size

184KB
MD5

0d3ecf2b9e76f07feb0f2934555ba860
SHA1

0a856ffc7f049137675a8af8d92c8528ea363609
SHA256

08d3c8dd37d2cc511cf19fdce050fb5cd39da5bebc5a82254ecc0dfe986dfcc6
SHA512

8dbb4b082f791d5aaceac524113eab8e7e12aa39a0336ae5a6a793c32333a7380e4d4ad960d34b812738214d8515576b6fb273e7b22b7a19fc841bdd76ec07d0
SSDEEP

3072:GJDzI6h7eWNar4GlEBeJFfnk3NZjlvYOLCHlV+cufX:GZzI6RVar+auigCHlVBk

Score

N/A

Malware Config

Signatures

Files

08d3c8dd37d2cc511cf19fdce050fb5cd39da5bebc5a82254ecc0dfe986dfcc6
.dll windows x86

48584cd8d00c81efd8d1e4c1416d4532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FreeLibrary
CreateEventA
OpenEventA
HeapFree
HeapAlloc
GetProcessHeap
LoadLibraryA
lstrlenA
SetLastError
GetWindowsDirectoryW
AllocConsole
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
SetEndOfFile
GetVersionExA
GetModuleHandleA
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetLastError
GetSystemInfo
VirtualProtect
CreateFileA
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileW
ExitProcess
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetLocalTime
GetCurrentThreadId
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
WriteFile
FlushFileBuffers
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
InitializeCriticalSection
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle

user32

wsprintfA

advapi32

RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

ole32

CoTaskMemFree
CoTaskMemAlloc

sqlunirl

_GetModuleFileName@12
_CreateFile@28
_GetComputerName@8
_LoadLibrary@4
_GetProcAddress_@8
_GetUnicodeRedirectionLayer@0

Exports

Exports

CreateSetupTopologyA
CreateSetupTopologyW
DeleteTopology
GetLangID
NTC_EnumeratePhysicalNode
NTC_EnumerateSQLCluster
NTC_GetNextPhysicalNode
NTC_GetNextSQLCluster
PN_ClusNeedSpInfoA
PN_ClusNeedSpInfoW
PN_Enumerate
PN_EnumerateExA
PN_EnumerateExW
PN_GetAny
PN_GetAnyInstForThisSPA
PN_GetAnyInstForThisSPW
PN_GetInstanceA
PN_GetInstanceW
PN_GetNameA
PN_GetNameW
PN_GetNext
PN_GetSQLStates
PN_IsUniqueInstanceNameA
PN_IsUniqueInstanceNameW
PN_PrintInstanceStates
PN_StartScan
SQLC_Enumerate
SQLC_GetNext
SQLI_GetDataPathA
SQLI_GetDataPathW
SQLI_GetFileVersion
SQLI_GetInstallPathA
SQLI_GetInstallPathW
SQLI_GetLanguage
SQLI_GetNameA
SQLI_GetNameW
SQLI_GetPackageId
SQLI_GetPackageNameA
SQLI_GetPackageNameW
SQLI_GetRegKeyRootA
SQLI_GetRegKeyRootW
SQLI_GetSPLevel
SQLI_GetSPVersion
SQLI_GetSQLStates
SQLI_GetType
SQLI_GetVSNameA
SQLI_GetVSNameW
SQLI_GetVersionA
SQLI_GetVersionW
SQLI_IsClustered
SQLI_IsSKUEqual
SQLI_IsSKUMsde2000
SQLI_IsSKUUpgradeable
SQLI_IsSameVersion
SQLI_IsVersionUpgradeable
ST_GetNTCluster
ST_GetPhysicalNode
ST_GetSQLCluster
ST_GetType

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

48584cd8d00c81efd8d1e4c1416d4532

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

sqlunirl

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 6KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 6KB

.rmnet
Size: 60KB - Virtual size: 60KB