76631b8615aba0a5f501dc72371e5305e9c0812f086c5180e8cabea8be72d9d2

Sharing

Copy URL

Twitter E-mail

General

Target

76631b8615aba0a5f501dc72371e5305e9c0812f086c5180e8cabea8be72d9d2
Size

444KB
MD5

3b4863b37f131d154e08c87e5c911120
SHA1

12c88320c391293a37f9fae2ec234b994d992348
SHA256

76631b8615aba0a5f501dc72371e5305e9c0812f086c5180e8cabea8be72d9d2
SHA512

7ae2106e6a36c032899803725a777106160f40f481dd71cf2b697c28549cb09510ca02d87dfcae5be41cd06facd5d46a97618016561c0b943a84e49331c23955
SSDEEP

12288:Anvxheh6uRmCJebM+Ud8N8WXOAtA30f3/HgPSdO:khUvRmCAU+JOZ03g6

Score

N/A

Malware Config

Signatures

Files

76631b8615aba0a5f501dc72371e5305e9c0812f086c5180e8cabea8be72d9d2
.dll windows x86

cad876a3a2f84a5ed2c0d1ac30eed28e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc71u

ord907
ord903
ord304
ord784
ord2313
ord310
ord2462
ord765
ord315
ord1033
ord5399
ord1199
ord1093
ord371
ord1115
ord1192
ord1168
ord1170
ord314
ord1200
ord1079
ord1087
ord1162
ord581
ord5525
ord3991
ord578
ord762
ord3824
ord757
ord566
ord3327
ord4255
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2832
ord2708
ord4301
ord2829
ord2725
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord764
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord3677
ord265
ord266
ord1197

msvcr71

??0exception@@QAE@ABV0@@Z
free
localtime
strncmp
tolower
isalnum
toupper
memmove
memset
_except_handler3
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
isxdigit
realloc
isspace
isdigit
strncpy
??0exception@@QAE@XZ
??1exception@@UAE@XZ
sprintf
atoi
strrchr
malloc
_CxxThrowException
__CxxFrameHandler

kernel32

GetSystemTimeAsFileTime
GetTempPathA
DeleteFileW
GetFileAttributesW
DeleteFileA
GetFileAttributesA
AreFileApisANSI
WideCharToMultiByte
MultiByteToWideChar
LockFileEx
CloseHandle
TlsAlloc
TlsGetValue
TlsSetValue
Sleep
GetSystemTime
FreeLibrary
GetProcAddress
LockFile
UnlockFile
GetFileSize
SetEndOfFile
FlushFileBuffers
SetFilePointer
GetLastError
WriteFile
ReadFile
CreateDirectoryA
GetModuleFileNameA
GetVersionExW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
LoadLibraryW
CreateFileA
CreateFileW
LocalFree
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetTempPathW
GetVersionExA

msvcp71

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

Exports

Exports

GetDBTaskModule

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cad876a3a2f84a5ed2c0d1ac30eed28e

Headers

File Characteristics

Imports

mfc71u

msvcr71

kernel32

msvcp71

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 308KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 816B

.reloc Size: 16KB - Virtual size: 14KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 312KB - Virtual size: 308KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 816B

.reloc
Size: 16KB - Virtual size: 14KB

.rmnet
Size: 60KB - Virtual size: 60KB