General

Malware Config

Signatures

Files

• cf04fc9db51e68544ae38d93ef517e8fff5c8a4e14d0c1628e7b9bcbf8286e88

  .exe windows x86

  4e864285ae0637eda8ffbf3f92a99df5

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  memset

  fopen

  _setjmp3

  fclose

  strlen

  strcpy

  gmtime

  _snprintf

  abort

  memcpy

  __p__iob

  fprintf

  longjmp

  malloc

  free

  fwrite

  fflush

  kernel32

  GetModuleHandleA

  HeapCreate

  HeapDestroy

  ExitProcess

  GetCurrentThreadId

  GetCurrentProcessId

  HeapAlloc

  FreeLibrary

  HeapFree

  LoadLibraryA

  GetProcAddress

  WriteFile

  CloseHandle

  HeapReAlloc

  comctl32

  InitCommonControls

  user32

  MessageBoxA

  GetWindowThreadProcessId

  IsWindowVisible

  IsWindowEnabled

  GetForegroundWindow

  EnableWindow

  EnumWindows

  ole32

  CoInitialize

  wsock32

  socket

  inet_addr

  gethostbyname

  htons

  connect

  ioctlsocket

  closesocket

  WSACleanup

  WSAStartup

  odbc32

  SQLGetDiagField

  SQLDescribeCol

  SQLSetStmtAttr

  SQLExecDirect

  SQLAllocHandle

  SQLFreeHandle

  SQLGetData

  SQLConnect

  SQLDisconnect

  SQLDriverConnect

  SQLSetEnvAttr

  SQLNumResultCols

  SQLFetchScroll

  SQLFetch

  Sections

  .code

  Size: 292KB - Virtual size: 292KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text

  Size: 58KB - Virtual size: 58KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 100KB - Virtual size: 99KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ