cf04fc9db51e68544ae38d93ef517e8fff5c8a4e14d0c1628e7b9bcbf8286e88

General

Target

cf04fc9db51e68544ae38d93ef517e8fff5c8a4e14d0c1628e7b9bcbf8286e88
Size

9.5MB
MD5

dcb0e76902f912328a7613df7221cfae
SHA1

1814a081ed127351f1cb6ad40e9003ab168508c4
SHA256

cf04fc9db51e68544ae38d93ef517e8fff5c8a4e14d0c1628e7b9bcbf8286e88
SHA512

6367e5546d90ea39432f1a1d1a321206b4b5be31d79ca82f3deea95a94edd25f606e9cc878e5e9dc372efd0338c3f9f071bf5a0268dea667122688263dcf8fda

Score

N/A

Malware Config

Signatures

Files

cf04fc9db51e68544ae38d93ef517e8fff5c8a4e14d0c1628e7b9bcbf8286e88
.exe windows x86

4e864285ae0637eda8ffbf3f92a99df5

Code Sign

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fopen
_setjmp3
fclose
strlen
strcpy
gmtime
_snprintf
abort
memcpy
__p__iob
fprintf
longjmp
malloc
free
fwrite
fflush

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
WriteFile
CloseHandle
HeapReAlloc

comctl32

InitCommonControls

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows

ole32

CoInitialize

wsock32

socket
inet_addr
gethostbyname
htons
connect
ioctlsocket
closesocket
WSACleanup
WSAStartup

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

Sections

.code
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e864285ae0637eda8ffbf3f92a99df5

Code Sign

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

ole32

wsock32

odbc32

Sections

.code Size: 292KB - Virtual size: 292KB

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 11KB

.rsrc Size: 100KB - Virtual size: 99KB

.code
Size: 292KB - Virtual size: 292KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 11KB

.rsrc
Size: 100KB - Virtual size: 99KB