96cae7ab510d7f467497a1d2b11be23ed921c32e08c6c8b249b01d67987af7be

Sharing

Copy URL Twitter E-mail

General

Target

96cae7ab510d7f467497a1d2b11be23ed921c32e08c6c8b249b01d67987af7be
Size

721KB
MD5

6002650d86207a04dab11813aee715b0
SHA1

9b0a192ca8c3b1a05767cc641d8c7db7e709a972
SHA256

96cae7ab510d7f467497a1d2b11be23ed921c32e08c6c8b249b01d67987af7be
SHA512

8aeb7b10db44866509f1ba3fe3a49761bfa1b55aa4392be7f5314d8b1b3a5d65bbb3b3eda66c537351d18613f765563ca5dcba5ac3868e8bb8dd36ebdaeed8f3
SSDEEP

12288:eVTE8BDtf2GC5vXEMnWWGMdK+UJwHOxXNpxfGoaomq/ALgXHZNBU5:II8BD2F0lWTCwkXNHGopmq/AMXv

Score

N/A

Malware Config

Signatures

Files

96cae7ab510d7f467497a1d2b11be23ed921c32e08c6c8b249b01d67987af7be
.exe windows x86

349e7538cad476a749d39d57d0373fab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FreeLibrary
UpdateResourceA
MoveFileWithProgressW
WriteFileEx
SetDefaultCommConfigW
RegisterWaitForInputIdle
GetModuleFileNameW
DefineDosDeviceW
InterlockedIncrement
HeapAlloc
SetConsoleCursorPosition
BuildCommDCBA
DeviceIoControl
UnlockFileEx
CreateMutexW
GetDriveTypeW
SetThreadExecutionState
VirtualAlloc
WaitForMultipleObjectsEx
RaiseException
GetSystemDefaultLCID
IsBadHugeWritePtr
GetPrivateProfileStringA
AssignProcessToJobObject
InitializeCriticalSectionAndSpinCount
SearchPathA
TerminateProcess
TerminateThread
DebugBreak
GetVersionExW
OpenProcess
FindResourceExW

odbc32

VFreeErrors
ValidateErrorQueue
ODBCGetTryWaitValue
PostODBCComponentError
VRetrieveDriverErrorsRowCol
CursorLibTransact
CursorLibLockStmt
CursorLibLockDbc
SearchStatusCode
PostODBCError
LockHandle
CursorLibLockDesc

advapi32

FreeSid
AddAccessAllowedAce
AddAccessDeniedAce
CloseTrace
LsaGetSystemAccessAccount
GetKernelObjectSecurity
SetEntriesInAclW
EnumDependentServicesW
GetServiceDisplayNameA
RegLoadKeyA
RegQueryMultipleValuesW
GetExplicitEntriesFromAclW
InitializeSid
RegOpenCurrentUser
StartServiceCtrlDispatcherA

ole32

CoQueryProxyBlanket
CreateGenericComposite
CoLoadLibrary
CoDisconnectObject
ReadClassStg
CoFreeLibrary
CoTaskMemFree
OleCreateFromFile
GetClassFile
StgCreateDocfile
CLIPFORMAT_UserSize
CoSuspendClassObjects
CLIPFORMAT_UserFree
DoDragDrop
OleFlushClipboard
OleConvertIStorageToOLESTREAM
HWND_UserUnmarshal
PropVariantClear
CoCreateInstanceEx
OleCreateDefaultHandler
FreePropVariantArray
CoUnmarshalInterface
StringFromCLSID
OleUninitialize
GetRunningObjectTable
CoTaskMemRealloc
OleRegGetUserType
RegisterDragDrop
RevokeDragDrop
OleNoteObjectVisible

uxtheme

GetThemeAppProperties
EnableThemeDialogTexture
GetWindowTheme
GetThemePartSize
DrawThemeIcon
GetThemeBackgroundRegion
GetThemeColor
SetWindowTheme
GetThemeBackgroundContentRect
OpenThemeData
GetThemeMetric
DrawThemeParentBackground
IsAppThemed
GetThemeFont
IsThemePartDefined
DrawThemeText
GetThemeBool
DrawThemeBackground
GetThemeTextExtent
IsThemeActive
GetThemeBackgroundExtent
GetThemeSysColor
GetCurrentThemeName
GetThemeRect
GetThemeSysFont

msvcrt

fwprintf
localeconv
_fsopen
iswlower
strcoll
_getmbcp
_cexit
__p__commode
wcscpy
sprintf
abort
_wfullpath
_itoa
fsetpos
_i64toa
calloc
_findfirst
_mbslwr

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 269KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

349e7538cad476a749d39d57d0373fab

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

odbc32

advapi32

ole32

uxtheme

msvcrt

Sections

.data Size: 4KB - Virtual size: 3KB

.text Size: 16KB - Virtual size: 423KB

.data Size: 161KB - Virtual size: 483KB

.bss Size: 269KB - Virtual size: 348KB

.rdata Size: 159KB - Virtual size: 164KB

.rsrc Size: 110KB - Virtual size: 109KB

.reloc Size: 1024B - Virtual size: 140B

.data
Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 423KB

.data
Size: 161KB - Virtual size: 483KB

.bss
Size: 269KB - Virtual size: 348KB

.rdata
Size: 159KB - Virtual size: 164KB

.rsrc
Size: 110KB - Virtual size: 109KB

.reloc
Size: 1024B - Virtual size: 140B