449b44b1259927b0433b86e081f375fb04307043fd166d3dda5217e6a5875acc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

449b44b1259927b0433b86e081f375fb04307043fd166d3dda5217e6a5875acc
Size

809KB
MD5

042ca7f327b985ff5d1748343763f0d0
SHA1

3f9030f9f50ae54eb6c220cdaaca26ee93bec0c1
SHA256

449b44b1259927b0433b86e081f375fb04307043fd166d3dda5217e6a5875acc
SHA512

9226fc58794aeff387c9fed55995442245e1290c23a452024ff35d5656382d2a465b1e3a861c044e67887f9b1f8f4a475d99236da2309226a2d9d9f8e27fd440
SSDEEP

24576:k9RYDpJ+pK73DNvJGs9e+MO0TBoeSBydOXJMpqbYmEqd9D:kRYWg73eAZMOYBDiydOXBErS5

Score

N/A

Malware Config

Signatures

Files

449b44b1259927b0433b86e081f375fb04307043fd166d3dda5217e6a5875acc
.exe windows x86

6b4fd9a3355afb17f1b80a8534645103

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
MoveFileW
lstrcpyA
GetModuleHandleA
GetLastError
GetLastError
GetModuleHandleW
GetVolumeInformationW
GetCurrentDirectoryW
GetLastError
GetConsoleTitleW
GetLastError
CreateSemaphoreA
GetLastError
VirtualProtectEx
GetFileType
GetLastError

odbctrac

TraceVersion
TraceReturn
TraceSQLCancel
TraceSQLConnect

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.Data
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE