2771a419c753d4cdeae2be22a9bc05efed5f7734be74d106e5bfc74d339167cc

Sharing

Copy URL

Twitter E-mail

General

Target

2771a419c753d4cdeae2be22a9bc05efed5f7734be74d106e5bfc74d339167cc
Size

444KB
MD5

4ff65e2e932fde4cf234738a7d6e3bc0
SHA1

a010db54dd2d31be5c7499acd09320d19f42a5af
SHA256

2771a419c753d4cdeae2be22a9bc05efed5f7734be74d106e5bfc74d339167cc
SHA512

c7bcd328fa3344072d445709e15f876ddbe4ddb3e979432bbf9b12cc43fff74488131231bb22cb0b857f33c0b23c6e7a9391e9eda97a0ca8d6e3a588cd3ed15a
SSDEEP

12288:knvxheh6uRmCJebM+Ud8N8WXOAtA30f3/HgPnbAVGy3:IhUvRmCAU+JOZ03gvbAB

Score

N/A

Malware Config

Signatures

Files

2771a419c753d4cdeae2be22a9bc05efed5f7734be74d106e5bfc74d339167cc
.dll windows x86

cad876a3a2f84a5ed2c0d1ac30eed28e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc71u

ord907
ord903
ord304
ord784
ord2313
ord310
ord2462
ord765
ord315
ord1033
ord5399
ord1199
ord1093
ord371
ord1115
ord1192
ord1168
ord1170
ord314
ord1200
ord1079
ord1087
ord1162
ord581
ord5525
ord3991
ord578
ord762
ord3824
ord757
ord566
ord3327
ord4255
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2832
ord2708
ord4301
ord2829
ord2725
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord764
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord3677
ord265
ord266
ord1197

msvcr71

??0exception@@QAE@ABV0@@Z
free
localtime
strncmp
tolower
isalnum
toupper
memmove
memset
_except_handler3
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
isxdigit
realloc
isspace
isdigit
strncpy
??0exception@@QAE@XZ
??1exception@@UAE@XZ
sprintf
atoi
strrchr
malloc
_CxxThrowException
__CxxFrameHandler

kernel32

GetSystemTimeAsFileTime
GetTempPathA
DeleteFileW
GetFileAttributesW
DeleteFileA
GetFileAttributesA
AreFileApisANSI
WideCharToMultiByte
MultiByteToWideChar
LockFileEx
CloseHandle
TlsAlloc
TlsGetValue
TlsSetValue
Sleep
GetSystemTime
FreeLibrary
GetProcAddress
LockFile
UnlockFile
GetFileSize
SetEndOfFile
FlushFileBuffers
SetFilePointer
GetLastError
WriteFile
ReadFile
CreateDirectoryA
GetModuleFileNameA
GetVersionExW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
LoadLibraryW
CreateFileA
CreateFileW
LocalFree
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetTempPathW
GetVersionExA

msvcp71

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

Exports

Exports

GetDBTaskModule

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cad876a3a2f84a5ed2c0d1ac30eed28e

Headers

File Characteristics

Imports

mfc71u

msvcr71

kernel32

msvcp71

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 308KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 816B

.reloc Size: 16KB - Virtual size: 14KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 312KB - Virtual size: 308KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 816B

.reloc
Size: 16KB - Virtual size: 14KB

.rmnet
Size: 60KB - Virtual size: 60KB