16bb8e2cafbbe8a74f06e5477afbed8935725df6a3c516c060ff081bea20464a

Sharing

Copy URL

Twitter E-mail

General

Target

16bb8e2cafbbe8a74f06e5477afbed8935725df6a3c516c060ff081bea20464a
Size

385KB
MD5

6a8869d76fbdb4a3acfcc7a5db9f37f2
SHA1

5272d443e437e748c0d15764b514762034cc4b30
SHA256

16bb8e2cafbbe8a74f06e5477afbed8935725df6a3c516c060ff081bea20464a
SHA512

37925289780e3ba4ff97799b5b961f3d15dcac395771ecb192d896f185293d7e4ed39f8a71e9bcf9ae5cdcce676518e69dd550c9223eb720ae37ff9f7f56b3f4
SSDEEP

6144:N52DLqOIrKeMEOHNeN+LvRBCdr6e9g5Lw5Epl0nKw88VcO92aM0f3nebNfL4dWTV:PAtQBCeN+rGFG5LZvvkGPFy2SQTFu6

Score

N/A

Malware Config

Signatures

Files

16bb8e2cafbbe8a74f06e5477afbed8935725df6a3c516c060ff081bea20464a
.exe windows x86

97fe52729992321fef3eec72f702d405

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAGetServiceClassInfoA
closesocket
getsockopt
getservbyport
WSALookupServiceBeginW
WSASocketW
socket
WSAIsBlocking
htonl
WSAAsyncGetServByPort
WSASend
WSACancelBlockingCall
WSAAsyncGetProtoByName
WSAStringToAddressA
WSACloseEvent
recv
WSAGetLastError
WEP
WSCEnumProtocols
WSCWriteProviderOrder
WSANtohs
setsockopt
WSAAsyncGetServByName
WSAInstallServiceClassA
WSAConnect
WSASocketA
inet_ntoa
WSAAddressToStringW

kernel32

DeleteTimerQueue
GetStartupInfoW
FindVolumeClose
GetShortPathNameA
ShowConsoleCursor
GetPrivateProfileIntA
GetLongPathNameW
WriteProcessMemory
GetVolumePathNamesForVolumeNameW
CreateJobSet
SetCommConfig
GetTickCount
GetPrivateProfileSectionNamesA
CmdBatNotification
DebugSetProcessKillOnExit
WritePrivateProfileStructW
GetConsoleInputWaitHandle
WriteProfileSectionA
GetCurrentProcessId
QueryPerformanceCounter
lstrcatA
PostQueuedCompletionStatus
GetBinaryType
SetConsoleCtrlHandler
GetCurrentThreadId
GetVolumeInformationW
GlobalFix
GetShortPathNameW
LoadLibraryA
BackupRead
VirtualAlloc
CompareStringW
WTSGetActiveConsoleSessionId
EndUpdateResourceA

odbcjt32

SQLSetPos
SQLProcedureColumnsW
SQLNumParams
SQLNativeSqlW
SQLAllocHandle
SQLSetStmtAttrW
SQLGetInfoW
SQLSetEnvAttr
SQLGetTypeInfoW
SQLGetDiagFieldW
SQLGetData
SQLEndTran
SQLSetCursorNameW
ConfigDSN
InvisibleSelectDb
SQLAllocStmt
SQLGetDescRecW
RepairCompactProc
SQLDriverConnectW
SQLGetDescFieldW
InitDialogAgain
SQLBindCol
SQLSetScrollOptions
SQLPutData
SQLExtendedFetch
SQLExecDirectW

msvcrt40

ldiv
??_Distream@@QAEXXZ
??0ofstream@@QAE@ABV0@@Z
getwchar
sqrt
?lockptr@ios@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
??0strstream@@QAE@PADHH@Z
_ismbcupper
_ismbcsymbol
getenv
_environ
_endthreadex
??_8istream_withassign@@7B@
iswcntrl
__setusermatherr
_adj_fdivr_m32i
??_7__non_rtti_object@@6B@
??_Gios@@UAEPAXI@Z
strtod
??0stdiostream@@QAE@ABV0@@Z

ws2help

WahEnumerateHandleContexts
WahReferenceContextByHandle
WahCompleteRequest
WahNotifyAllProcesses
WahEnableNonIFSHandleSupport
WahCreateNotificationHandle
WahCreateSocketHandle
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahOpenHandleHelper
WahInsertHandleContext
WahDisableNonIFSHandleSupport
WahWaitForNotification
WahCloseThread
WahRemoveHandleContext
WahOpenNotificationHandleHelper
WahCreateHandleContextTable
WahOpenCurrentThread
WahOpenApcHelper
WahCloseHandleHelper
WahDestroyHandleContextTable
WahCloseApcHelper
WahQueueUserApc

msoeacct

GetDllMajorVersion
ValidEmailAddress
DllGetClassObject
DllCanUnloadNow
HrCreateAccountManager

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 759KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97fe52729992321fef3eec72f702d405

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

odbcjt32

msvcrt40

ws2help

msoeacct

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 65KB - Virtual size: 64KB

.data Size: 276KB - Virtual size: 759KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 36KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 236B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 65KB - Virtual size: 64KB

.data
Size: 276KB - Virtual size: 759KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 36KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 236B