78778ae223edfc52a066570a1c3bb7cc84338e871986449a68c00d0fa5a35118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78778ae223edfc52a066570a1c3bb7cc84338e871986449a68c00d0fa5a35118
Size

57KB
MD5

0b7c4683b704eb80045d6bc9325f496c
SHA1

56121e9550ef987b7afd97876ef5ebd5d8bc7670
SHA256

78778ae223edfc52a066570a1c3bb7cc84338e871986449a68c00d0fa5a35118
SHA512

c3db7985c7393408a82acc78f357adadc1148afe85f8a66dfddbba571b1a99416b9ee782a48773cfdfe3c38463fc467b5f58fabcd9e3f4457dd352fc0ce1b6e7
SSDEEP

1536:bdLUPsXSY2TbJY5iVenBg2t706ovPRswF3ESFjBbb:RLUEXSY2TW0NvPxR5R

Score

N/A

Malware Config

Signatures

Files

78778ae223edfc52a066570a1c3bb7cc84338e871986449a68c00d0fa5a35118
.exe windows x86

be13febc9c95e309e9a2e8faa4acb7a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
HeapCreate
GetProcessHeap
GetLogicalDrives
GetModuleFileNameA
Sleep
CreateWaitableTimerW
GetModuleHandleA
lstrlenA
SetLastError
lstrcmpiA
lstrcmpiA
GetDriveTypeA
IsValidCodePage
SuspendThread
GetStdHandle
EndUpdateResourceW
GetBinaryTypeW
lstrcmpiA
lstrcmpiA
CreateNamedPipeA
lstrcmpiA
GetExitCodeProcess

odbctrac

TraceSQLError
TraceSQLConnect
TraceSQLCancel
TraceVersion

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE