1c066533aa38cd17b2a4f3534dc72fa1006935807003de528976486372c8318d

Sharing

Copy URL Twitter E-mail

General

Target

1c066533aa38cd17b2a4f3534dc72fa1006935807003de528976486372c8318d
Size

262KB
MD5

05942e9f9ed38b8399c31e4ad7d8acdd
SHA1

3c3303d6bdc100677b972195dd6c64fd9345f3af
SHA256

1c066533aa38cd17b2a4f3534dc72fa1006935807003de528976486372c8318d
SHA512

38d260ed0d9e8688775b63374ddd76458775f8f0f5023f12b2c3fb780a206b2a6cd1c72937e47c21d7bebc1577f8e7ccc7ea7ef0fe47f5556b5efbb644a4c919
SSDEEP

6144:SYNn/LnHw7Et4AE3TjtHx3Y9J7dTkv4gPq9P/oo:SYhLHwEPUlHxI5dAwSo

Score

N/A

Malware Config

Signatures

Files

1c066533aa38cd17b2a4f3534dc72fa1006935807003de528976486372c8318d
.exe windows x86

74df067bf8ce54212fbf0709f74bed31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
strlen
memcpy
fseek
ftell
fread
sprintf
fabs
ceil
malloc
floor
free
fclose
_CIpow
strcpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
HeapAlloc
HeapFree
InitializeCriticalSection
TlsAlloc
GetVersionExA
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
CreateFileA
ReadFile
CloseHandle

user32

SendMessageA
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
RemovePropA
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
DestroyIcon
FillRect
BeginPaint
EndPaint
DefWindowProcA
RegisterClassExA
CreateWindowExA

gdi32

DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

comctl32

InitCommonControlsEx

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
RevokeDragDrop

winmm

timeEndPeriod

odbc32

SQLDataSources
SQLFreeHandle
SQLAllocHandle
SQLDisconnect
SQLNumResultCols
SQLFetchScroll
SQLGetData
SQLFetch

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

74df067bf8ce54212fbf0709f74bed31

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comctl32

ole32

winmm

odbc32

Sections

.code Size: 9KB - Virtual size: 9KB

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 6KB

.code
Size: 9KB - Virtual size: 9KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 6KB