af4dc5086d29f1a5f02b9a91364b41f5a109a6fee52ef3469b5b6d5c229bbbef

Sharing

Copy URL Twitter E-mail

General

Target

af4dc5086d29f1a5f02b9a91364b41f5a109a6fee52ef3469b5b6d5c229bbbef
Size

356KB
MD5

0262af5dea71649a8f90e1997906fa12
SHA1

45da376adeddd29a2078ddb7f80af748ec7059df
SHA256

af4dc5086d29f1a5f02b9a91364b41f5a109a6fee52ef3469b5b6d5c229bbbef
SHA512

aeb8328460ca2d7da659449e91e852fff1b7bd5b673a721ce1272ffc0ba5693ebfc78effa14b9f73f705f96a86da68477cb303f6a9d3e683a936fc419012dcc8
SSDEEP

6144:PZY+HKEUhzQJ5BKPF8bnMX3CpQl1yMDoP1xMAY:7KnhzM1nCPf+/MB

Score

N/A

Malware Config

Signatures

Files

af4dc5086d29f1a5f02b9a91364b41f5a109a6fee52ef3469b5b6d5c229bbbef
.dll windows x86

1707c24a2c9d73f427ef9abbf519fe03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

towlower
strncpy
_errno
strtod
_ecvt
_mbsrev
_strnicmp
time
localtime
_ultoa
_ltoa
strchr
wcscspn
wcsrchr
_wchdir
_chdir
wcstol
wcscat
wcsstr
wcschr
wcsncat
wcstok
_getcwd
_itow
_ltow
iswctype
_wcsnicmp
_ftol
modf
floor
memmove
wcsncpy
sprintf
_except_handler3
_splitpath
_snprintf
towupper
bsearch
_wtol
wcsncmp
_wsplitpath
wcspbrk
_heapmin
malloc
swprintf
free
_wtoi
wcscpy
wcscmp
_wcsicmp
swscanf
_snwprintf
wcslen
_wstat
_stat
_wfullpath
_fullpath
calloc

kernel32

GetPrivateProfileStringW
GetPrivateProfileStringA
GetSystemDirectoryW
VirtualAlloc
CreateFileW
OutputDebugStringW
VirtualProtect
CreateFileA
GetFileSize
MoveFileExA
LoadLibraryA
LocalAlloc
LocalLock
LocalUnlock
GetCurrentProcessId
GetProcessVersion
lstrlenW
GetCurrentThreadId
GetLastError
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLCID
GetSystemDefaultLCID
FindClose
FindNextFileW
FindNextFileA
MoveFileA
DeleteFileA
GetTempPathA
GetTempFileNameA
GetDriveTypeW
SetErrorMode
GetWindowsDirectoryW
CloseHandle
GetCurrentDirectoryW
GetCurrentDirectoryA
FindFirstFileW
FindFirstFileA
GetCurrencyFormatA
GetNumberFormatA
GetTimeFormatA
GetDateFormatA
FreeResource
LockResource
LoadResource
FindResourceA
LocalFree
WritePrivateProfileStringA
GetModuleHandleA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
GetUserNameW
RegDeleteKeyW
RegDeleteKeyA
RegEnumKeyExW
RegEnumKeyExA
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
RegQueryValueExW

user32

wsprintfA
MessageBoxW
SetCursor
GetWindowTextLengthW
GetWindowTextLengthA
SetWindowTextW
SetWindowTextA
GetWindowTextW
GetWindowTextA
LoadStringW
SendMessageA
MessageBoxA
LoadCursorW
GetDlgItem
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
EndDialog
GetWindowLongA
GetDlgCtrlID
SetFocus
IsWindowEnabled
EnableWindow
LoadCursorA
CharLowerW
ShowWindow
GetWindow
RegisterWindowMessageA
MoveWindow
ClientToScreen
GetClientRect
GetWindowRect
GetDesktopWindow
GetParent
SetWindowPos
DestroyWindow
CreateDialogParamW
CharToOemA
LoadStringA
SendMessageW
CharUpperW
GetDC
ReleaseDC

gdi32

GetTextExtentPointW

msjet40

ord154
ord150
ord169
ord104
ord109
ord107
ord138
ord311
ord146
ord156
ord167
ord319
ord302
ord145
ord136
ord317
ord137
ord56
ord103
ord133
ord140
ord310
ord126
ord120
ord132
ord151
ord110
ord185
ord112
ord157
ord179
ord172
ord304
ord108
ord316
ord158
ord130
ord153
ord178
ord906
ord176
ord159

mswstr10

ord7

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW

Exports

Exports

ServiceMain
AssertSzFail
ConfigDSN
ConfigDSNExW
ConfigDSNW
ConfigDialogProc
ConfigDriverW
DefTxtFmtDlgProc
InitDialogAgain
InitializeLoginDialog
InvisibleSelectDb
LibMain
LoadByOrdinal
LoginDialogProc
OpenDirHook
RepairCompactProc
SQLAllocConnect
SQLAllocEnv
SQLAllocHandle
SQLAllocStmt
SQLBindCol
SQLBindParameter
SQLBulkOperations
SQLCancel
SQLCloseCursor
SQLColAttributeW
SQLColumnsW
SQLConnectW
SQLCopyDesc
SQLDescribeColW
SQLDisconnect
SQLDriverConnectW
SQLEndTran
SQLExecDirectW
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLFreeConnect
SQLFreeEnv
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttrW
SQLGetCursorNameW
SQLGetData
SQLGetDescFieldW
SQLGetDescRecW
SQLGetDiagFieldW
SQLGetDiagRecW
SQLGetFunctions
SQLGetInfoW
SQLGetStmtAttrW
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSqlW
SQLNumParams
SQLNumResultCols
SQLParamData
SQLPrepareW
SQLProcedureColumnsW
SQLProceduresW
SQLPutData
SQLRowCount
SQLSetConnectAttrW
SQLSetCursorNameW
SQLSetDescFieldW
SQLSetDescRec
SQLSetEnvAttr
SQLSetPos
SQLSetScrollOptions
SQLSetStmtAttrW
SQLSpecialColumnsW
SQLStatisticsW
SQLTablesW
SelectIndexDlgProc
SelectUIdxDlgProc

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1707c24a2c9d73f427ef9abbf519fe03

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

gdi32

msjet40

mswstr10

comdlg32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 184KB

.data Size: 28KB - Virtual size: 26KB

.rsrc Size: 120KB - Virtual size: 116KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 188KB - Virtual size: 184KB

.data
Size: 28KB - Virtual size: 26KB

.rsrc
Size: 120KB - Virtual size: 116KB

.reloc
Size: 12KB - Virtual size: 8KB