hubav SQLPad2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hubav SQLPad2.exe
Size

1.9MB
MD5

801c6b3a25c0b6a3c9c7b2e1f8b2ce69
SHA1

8165da4277e71006eeceec5773b7a36cc55efdc8
SHA256

621a643f20785a92c86d14208345abdd39d91e6e2b9569a530e1145d16951c6f
SHA512

a2172716d79cad77a003cf8cef528d8fe8dd8837b4be46158f7fd9661e9a4a6b1cfd206bece30d09fb52ac04b83928b11c0693ed219efde4e4e7e43f2ace6f50
SSDEEP

24576:AFw3leM/h+JkO0wkHdICycedkUlX0fpLrM/3sD4dBipMaf3Ejf4L3uNH:Aaemh+JkOTeWbdFX0fhEY2Ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hubav SQLPad2.exe

Files

hubav SQLPad2.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ