mysql_upgrade_wizard[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

mysql_upgrade_wizard.exe
Size

1.7MB
MD5

9e850c462360c78368bcea0ae342fd41
SHA1

ca06a1cc4693855b3af70c28b66d8ff5cb4028fd
SHA256

95295d6441511066efab34802c932bbba1041b48c25d35ee49bbb35ac95b1e93
SHA512

f64885be4c3394cae61df4b6818e2a9a3f1dae4dea2ced63c978b2a4a0bf31977f03b40e536453f7d33c9fe7a052981320de1e9d2f46e4f70a4ead2b858fd4e2
SSDEEP

49152:kx6/CUrq/+IXplqWQYS1clEXHLt22zNUjrlhk7mOc5cuFFEkktQAnNcuw:vCUrqFXpXQYS1cl4HLt22zNUjrl0u5JX

Score

1^/10

Malware Config

Signatures

Files

mysql_upgrade_wizard.exe
.exe windows:5 windows x86

5780786ba4128526452a8db42d7e2fa9

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:7d:59:c2:c4:d7:9f:84:6e:47:d5:cd:b4:e3:19:55
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/11/2014, 00:00

Not After

17/01/2018, 12:00

Subject

CN=MariaDB Corporation Ab,O=MariaDB Corporation Ab,L=Espoo,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

eb:5b:99:b3:32:bf:bc:a1:ea:42:3b:99:8c:57:90:ae:dd:e5:60:1a
Signer

Actual PE Digest

eb:5b:99:b3:32:bf:bc:a1:ea:42:3b:99:8c:57:90:ae:dd:e5:60:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
FlushFileBuffers
LockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
FileTimeToSystemTime
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTickCount
GetProfileIntA
Sleep
SearchPathA
VirtualProtect
FindResourceExW
ExitProcess
DecodePointer
RaiseException
RtlUnwind
EncodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
ExitThread
CreateThread
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
LCMapStringW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
GetProcessHeap
WriteFile
SetEnvironmentVariableA
DeleteFileA
GetCurrentDirectoryA
GetACP
lstrcpyA
GetSystemDirectoryW
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
CopyFileA
GlobalSize
FormatMessageA
lstrlenW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GlobalAlloc
GetModuleHandleW
InterlockedExchange
CreateEventA
SetEvent
SetThreadPriority
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
lstrlenA
FindResourceA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
GetProcAddress
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
LoadLibraryA
MultiByteToWideChar
lstrcmpW
FreeLibrary
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
GetModuleFileNameW
SetLastError
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GetFullPathNameW
GetFileAttributesA
GetPrivateProfileStringA
LocalFree
GetFullPathNameA
CreateFileA
CreateFileW
lstrcmpiA
CreateJobObjectA
SetInformationJobObject
CreatePipe
SetHandleInformation
GetStdHandle
CreateProcessA
AssignProcessToJobObject
GetLastError
CloseHandle
ReadFile
WaitForSingleObject
GetExitCodeProcess
GetModuleFileNameA
SuspendThread
ResumeThread
UnlockFile
TerminateJobObject

user32

LoadAcceleratorsW
CreateAcceleratorTableA
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
LoadImageA
GetNextDlgGroupItem
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageA
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
MapDialogRect
DestroyCursor
GetWindowRgn
NotifyWinEvent
InvalidateRect
DrawFocusRect
FillRect
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WaitMessage
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetKeyboardState
GetWindowTextLengthA
GetWindowTextA
DrawStateA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
CopyRect
PtInRect
GetWindow
UnhookWindowsHookEx
DrawIcon
SendMessageA
IsIconic
GetClientRect
EnableWindow
LoadIconW
GetSystemMetrics
ReleaseCapture
WindowFromPoint
SetCapture
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
KillTimer
SetTimer
DeleteMenu
IntersectRect
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
LoadCursorA
GetSysColorBrush
CopyImage
RealChildWindowFromPoint
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
GetDC
UnregisterClassA
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
SetFocus
DrawIconEx
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
PostQuitMessage
GetMessageA
MessageBeep
GetSystemMenu
LoadMenuW
SetClassLongA
GetAsyncKeyState
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
CharUpperA
GetForegroundWindow
DestroyIcon
TranslateMessage
GetCursorPos
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
MapVirtualKeyA
GetKeyNameTextA
WinHelpA
ReleaseDC
InflateRect

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
OpenSCManagerA
EnumServicesStatusExA
OpenServiceA
QueryServiceConfigW
CloseServiceHandle
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegEnumValueA

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImagePaletteSize
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateFromHDC

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

gdi32

CreateCompatibleDC
BitBlt
GetTextMetricsA
DeleteObject
SelectObject
CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
CreateBitmap
GetObjectA
SetBkColor
SetROP2
SetPixelV
GetTextFaceA
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExA
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
GetRgnBox
OffsetRgn
GetSystemPaletteEntries
SetMapMode
RealizePalette
GetNearestPaletteIndex
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateHatchBrush
CopyMetaFileA
CreateDCA
CreateFontIndirectA
GetTextExtentPoint32A
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
CombineRgn
DPtoLP
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
SetTextColor

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

SHBrowseForFolderA
SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
CommandLineToArgvW

ole32

OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateGuid
DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx

oleaut32

SysStringLen
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
VariantInit
VariantClear
VariantChangeType

comdlg32

GetFileTitleA

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5780786ba4128526452a8db42d7e2fa9

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0b:7d:59:c2:c4:d7:9f:84:6e:47:d5:cd:b4:e3:19:55Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

eb:5b:99:b3:32:bf:bc:a1:ea:42:3b:99:8c:57:90:ae:dd:e5:60:1aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msimg32

comctl32

shlwapi

version

oleacc

gdiplus

imm32

winmm

gdi32

winspool.drv

shell32

ole32

oleaut32

comdlg32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 259KB - Virtual size: 259KB

.data Size: 22KB - Virtual size: 137KB

.rsrc Size: 114KB - Virtual size: 114KB

.reloc Size: 163KB - Virtual size: 162KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0b:7d:59:c2:c4:d7:9f:84:6e:47:d5:cd:b4:e3:19:55
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

eb:5b:99:b3:32:bf:bc:a1:ea:42:3b:99:8c:57:90:ae:dd:e5:60:1a
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 259KB - Virtual size: 259KB

.data
Size: 22KB - Virtual size: 137KB

.rsrc
Size: 114KB - Virtual size: 114KB

.reloc
Size: 163KB - Virtual size: 162KB