Static task
static1
Behavioral task
behavioral1
Sample
SQLi Dumper 9.2.1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
SQLi Dumper 9.2.1.exe
Resource
win10v2004-20240802-en
General
-
Target
SQLi Dumper 9.2.1.exe
-
Size
6.9MB
-
MD5
a2b44b1d7c14c6bf93f23015263b5477
-
SHA1
bf3a332cb977565f3a0771ce1c64d744b2d8cb34
-
SHA256
c169b8b204882e6e2a6533aae7f4a27d06a715da30a3975090ba9913f5454bfb
-
SHA512
c4487733b399c4a5eaf1934b7e89b57ec69eeff816c508eb06862950ef8971c37b59d49b62a1c1fbc9201390b66019ad7f4e85c3e60e85787a1f823c1edde826
-
SSDEEP
196608:oei0S1KvYwZ+TGPWKGT1TLP+04nCrV7Kqk0A1ebJCrsJ83vtro2F6Q:vvYQyzT1TLP6CrV73k0A4bJssu22l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SQLi Dumper 9.2.1.exe
Files
-
SQLi Dumper 9.2.1.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ