ed229cfcdc7640e3b643a38797c77aadb5a158a8566d9b88e36656319f35a223 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed229cfcdc7640e3b643a38797c77aadb5a158a8566d9b88e36656319f35a223
Size

809KB
MD5

4cf18313075c891d392187115e5d8be0
SHA1

8f37cc14aef92532cb2de443161ad60e12a4ddaf
SHA256

ed229cfcdc7640e3b643a38797c77aadb5a158a8566d9b88e36656319f35a223
SHA512

5ba1a28d6995d63bb6e118c2ac24e53361cc43c5aca79f67109e733d0fbd2f6640bea8019bd1e3f70972061340efe39aa92ca38dd240ab30ab5e0812de28fd0a
SSDEEP

12288:rQ4bOE4vK5Z9nD4cH5LBcl3Nuu2vUduTyZKh1+A+8vPUs25EafnTNrshltp49Ydl:rOpgZ3LMculduTyZ0+uPUs25ESsh7o8

Score

N/A

Malware Config

Signatures

Files

ed229cfcdc7640e3b643a38797c77aadb5a158a8566d9b88e36656319f35a223
.exe windows x86

f7bd147f3143600caaeffe0314649e5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
GetConsoleTitleW
GetLastError
GetLastError
GetLastError
MoveFileW
lstrcpyA
CreateSemaphoreA
GetLastError
GetLastError
VirtualProtectEx
GetVolumeInformationW
GetFileType
GetLastError
GetCurrentDirectoryW
GetModuleHandleW

odbctrac

TraceReturn
TraceSQLConnect
TraceVersion
TraceSQLCancel

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.Data
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE