1b011041082e12d55981ce874d0b79744ba8bb5ba2c4c17208e9a56af3c47f55

Sharing

Copy URL

Twitter E-mail

General

Target

1b011041082e12d55981ce874d0b79744ba8bb5ba2c4c17208e9a56af3c47f55
Size

262KB
MD5

434115b514d59e7e47ac72167649ab30
SHA1

679b688ed17fd79f9d5dc1229d89708cb4216763
SHA256

1b011041082e12d55981ce874d0b79744ba8bb5ba2c4c17208e9a56af3c47f55
SHA512

631e4e2243a5a381423b0e76504ff062b0744399e2e285b31902557e3770c2d3b7e7cdf350adf328ee81e78e036a03832efdc18de301474e0a04e33f3a831e3d
SSDEEP

6144:9Wd/jTK5vLJoBHzVGJc5zSDKpDERs4RKtenXR:9W3KheA+5zmKFER1B

Score

N/A

Malware Config

Signatures

Files

1b011041082e12d55981ce874d0b79744ba8bb5ba2c4c17208e9a56af3c47f55
.exe windows x86

74df067bf8ce54212fbf0709f74bed31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
strlen
memcpy
fseek
ftell
fread
sprintf
fabs
ceil
malloc
floor
free
fclose
_CIpow
strcpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
HeapAlloc
HeapFree
InitializeCriticalSection
TlsAlloc
GetVersionExA
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
CreateFileA
ReadFile
CloseHandle

user32

SendMessageA
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
RemovePropA
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
DestroyIcon
FillRect
BeginPaint
EndPaint
DefWindowProcA
RegisterClassExA
CreateWindowExA

gdi32

DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

comctl32

InitCommonControlsEx

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
RevokeDragDrop

winmm

timeEndPeriod

odbc32

SQLDataSources
SQLFreeHandle
SQLAllocHandle
SQLDisconnect
SQLNumResultCols
SQLFetchScroll
SQLGetData
SQLFetch

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

74df067bf8ce54212fbf0709f74bed31

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comctl32

ole32

winmm

odbc32

Sections

.code Size: 9KB - Virtual size: 9KB

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 6KB

.code
Size: 9KB - Virtual size: 9KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 6KB