504b2179dac3897ce1d85c9368f9a19197da095bad142a11c16a263de8ba28f2

Sharing

Copy URL

Twitter E-mail

General

Target

504b2179dac3897ce1d85c9368f9a19197da095bad142a11c16a263de8ba28f2
Size

2.1MB
MD5

6630d54b5c4a82da2f9734cd0153d518
SHA1

3ff06a591e24560a61a75aa381bc987cfcc4baa2
SHA256

504b2179dac3897ce1d85c9368f9a19197da095bad142a11c16a263de8ba28f2
SHA512

cab22c5b161cc157ef845df34070c212ada77dc356feac15f2a963f51442780d5bdd95caefd3adbb748be8232190bd3c4650ce8f7cf878ca05869e09b7fa0171
SSDEEP

24576:weXywfDF9LGVWBxeEfWFhyAO9TtRNGanYfwQ8:wOcWz9fEATtRJncw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
504b2179dac3897ce1d85c9368f9a19197da095bad142a11c16a263de8ba28f2

Files

504b2179dac3897ce1d85c9368f9a19197da095bad142a11c16a263de8ba28f2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\cygwin\home\mysqldev\odbc\src\mysql-connector-odbc-3.51.22r857\lib\RelWithDebInfo\myodbc3.pdb

Exports

Exports

DllMain
LoadByOrdinal
SQLAllocConnect
SQLAllocEnv
SQLAllocHandle
SQLAllocStmt
SQLBindCol
SQLBindParameter
SQLBrowseConnect
SQLBulkOperations
SQLCancel
SQLCloseCursor
SQLColAttribute
SQLColAttributes
SQLColumnPrivileges
SQLColumns
SQLConnect
SQLDescribeCol
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLEndTran
SQLError
SQLExecDirect
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLForeignKeys
SQLFreeConnect
SQLFreeEnv
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttr
SQLGetConnectOption
SQLGetCursorName
SQLGetData
SQLGetDiagField
SQLGetDiagRec
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfo
SQLGetStmtAttr
SQLGetStmtOption
SQLGetTypeInfo
SQLMoreResults
SQLNativeSql
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrimaryKeys
SQLProcedureColumns
SQLProcedures
SQLPutData
SQLRowCount
SQLSetConnectAttr
SQLSetConnectOption
SQLSetCursorName
SQLSetEnvAttr
SQLSetPos
SQLSetScrollOptions
SQLSetStmtAttr
SQLSetStmtOption
SQLSpecialColumns
SQLStatistics
SQLTablePrivileges
SQLTables
SQLTransact

Sections

.text
Size: 680KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 680KB - Virtual size: 676KB

.rdata Size: 112KB - Virtual size: 110KB

.data Size: 1.2MB - Virtual size: 1.2MB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 44KB - Virtual size: 40KB

.reloc Size: 32KB - Virtual size: 31KB

.text
Size: 680KB - Virtual size: 676KB

.rdata
Size: 112KB - Virtual size: 110KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 44KB - Virtual size: 40KB

.reloc
Size: 32KB - Virtual size: 31KB