985eb2fadcf2dcc55db1c1f0b74d1dee767f1824792cbaf03177ba5d268358cb

General

Target

985eb2fadcf2dcc55db1c1f0b74d1dee767f1824792cbaf03177ba5d268358cb
Size

872KB
MD5

07bc03f24b66de25bb84c4ac4fd65131
SHA1

26f43f6972e3f84f4c06065db984f8b1faec7043
SHA256

985eb2fadcf2dcc55db1c1f0b74d1dee767f1824792cbaf03177ba5d268358cb
SHA512

f56d10d8047638feeff1dd3810d058b0b38d54b8cada4e47a40b2f292afff5d577d8cc1026739b7d032cd43ada19a359a1ef8b2dfbf6b3cff74c0f6db3b28987
SSDEEP

12288:+KrwGGsBW25D6wHm1aFvX48AcfOgu2N3fVc+qr+NbzA5YI6fKriZ4FATwbRWJsNE:nkGBOMFPXAEg25VHWz6fKM4KTiYT

Score

N/A

Malware Config

Signatures

Files

985eb2fadcf2dcc55db1c1f0b74d1dee767f1824792cbaf03177ba5d268358cb
.exe windows x86

1c564871fa88cb7023ee4675cae1bab8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OpenMutexW
CreateFileW
GetFileAttributesA
CreateDirectoryA
GetModuleFileNameA
AddAtomA
HeapDestroy
GetDriveTypeW
DeleteFileW
CreateFileW
DeleteFileW
SetFilePointer
VirtualProtectEx
GetProcessVersion
GetTickCount
GetCurrentThreadId
PulseEvent
IsValidLocale
InterlockedExchange
GlobalFlags
SetFileTime
OpenEventW
LeaveCriticalSection
GetVolumePathNameA
GetModuleHandleA

user32

LoadCursorA
DispatchMessageA
DestroyIcon
MessageBoxA
GetWindowLongA
GetWindowTextA
DestroyMenu
SetRect
PeekMessageA
SetFocus
GetWindowLongA
wsprintfA
IsMenu

dbnetlib

ConnectionOpen
ConnectionError
ConnectionClose
InitSession

advapi32

IsValidAcl

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ardata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c564871fa88cb7023ee4675cae1bab8

Headers

File Characteristics

Imports

kernel32

user32

dbnetlib

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 794KB - Virtual size: 2.2MB

.ardata Size: 60KB - Virtual size: 60KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 794KB - Virtual size: 2.2MB

.ardata
Size: 60KB - Virtual size: 60KB