919fe44c400cc4debf0679b97dca42bced3e41f15d48678690274fe3f5c654fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

919fe44c400cc4debf0679b97dca42bced3e41f15d48678690274fe3f5c654fb
Size

294KB
MD5

df5101004dfe01a1e98c82902ea816c4
SHA1

1f8970c9a7c13d9d60686b7625c49e90d3447039
SHA256

919fe44c400cc4debf0679b97dca42bced3e41f15d48678690274fe3f5c654fb
SHA512

72b98cf917e11254bfe5235743b0225e0396247c816ea364cfbacb5d58ae9553f945358b789c9eff05976fa7f81fe628d90fbcae4f2af891b97f466ce1df6066
SSDEEP

6144:tVPodRM6kbOodFuCKdugBJkc7rJT25wSSNzVPLO:txgi+o2djJZt25GNx

Score

N/A

Malware Config

Signatures

Files

919fe44c400cc4debf0679b97dca42bced3e41f15d48678690274fe3f5c654fb
.exe windows x86

a69d9e395b6f338d78668831f91d1a64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
lstrcmpiA
HeapCreate
GetProcessHeap
CreateWaitableTimerW
EndUpdateResourceW
lstrcmpiA
lstrcmpiA
GetExitCodeProcess
Sleep
GetLogicalDrives
GetModuleHandleA
lstrcmpiA
GetBinaryTypeW
GetModuleFileNameA
IsValidCodePage
CreateNamedPipeA
FileTimeToLocalFileTime
SetLastError
GetDriveTypeA
lstrlenA
lstrcmpiA
SuspendThread

odbctrac

TraceSQLError
TraceVersion
TraceSQLCancel
TraceSQLConnect

Sections

.text
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE