97a61f26586569c9bc97e7cca82d7aa69797c9d3ace1a8263bfd3e8b6111e61a

Sharing

Copy URL

Twitter E-mail

General

Target

97a61f26586569c9bc97e7cca82d7aa69797c9d3ace1a8263bfd3e8b6111e61a
Size

346KB
MD5

91bdd766784e4f83ff79833b4c379b0a
SHA1

0e9fadc68374f082de869e9293642e5f89e715bd
SHA256

97a61f26586569c9bc97e7cca82d7aa69797c9d3ace1a8263bfd3e8b6111e61a
SHA512

04843ca6f6e25e39ea8d00f5aaaf2f2fd388edd994bc29979520ddddd52b4fac6cffa854163e3fe6bf64b521b58832525d54834d420714b013e360eee0c0a42d
SSDEEP

6144:lBssnb87IVCX/lLKlLI9SuzXSnVSa8jl0aWlgyk/fmwLdzlk:lBssnbaIo/glLI9SuzXSVSaLgyMdLdzl

Score

N/A

Malware Config

Signatures

Files

97a61f26586569c9bc97e7cca82d7aa69797c9d3ace1a8263bfd3e8b6111e61a
.exe windows x86

0dcbf6d83584fb213552a493ea58c107

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
sprintf
strerror
_errno
_beginthread
_endthread
_wsplitpath
_except_handler3
_heapmin
_splitpath
strncpy
fflush
_stricmp
malloc
fwrite
_snprintf
isprint
_pctype
fclose
_wfsopen
wcslen
_fsopen
_fullpath

ole32

CoCreateInstance
CoInitialize
CoUninitialize

odbc32

ord36

kernel32

GetCommandLineA
WaitForSingleObject
GetComputerNameA
GetCommandLineW
QueryPerformanceCounter
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
GetFileSize
MoveFileExA
GetModuleFileNameA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
CreateEventA
Sleep
CloseHandle
FreeLibrary
InitializeCriticalSection
MultiByteToWideChar
OutputDebugStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
IsBadWritePtr
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
SetEvent

user32

wsprintfW
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iq
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oooa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obb
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sef
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qwqw
Size: 2KB - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdsd
Size: 2KB - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xczxc
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asqea
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asqeax
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oapa
Size: 2KB - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 2KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0dcbf6d83584fb213552a493ea58c107

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ole32

odbc32

kernel32

user32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 940B

.tls Size: 2KB - Virtual size: 21B

.iq Size: 96KB - Virtual size: 94KB

.oooa Size: 4KB - Virtual size: 2KB

.obb Size: 96KB - Virtual size: 94KB

.sef Size: 96KB - Virtual size: 94KB

.qwqw Size: 2KB - Virtual size: 537B

.sdsd Size: 2KB - Virtual size: 103B

.xczxc Size: 2KB - Virtual size: 200B

.asqea Size: 2KB - Virtual size: 200B

.asqeax Size: 2KB - Virtual size: 200B

.oapa Size: 2KB - Virtual size: 82B

.CRT Size: 2KB - Virtual size: 8B

.rsrc Size: 18KB - Virtual size: 16KB

.reloc Size: 2KB - Virtual size: 296KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 940B

.tls
Size: 2KB - Virtual size: 21B

.iq
Size: 96KB - Virtual size: 94KB

.oooa
Size: 4KB - Virtual size: 2KB

.obb
Size: 96KB - Virtual size: 94KB

.sef
Size: 96KB - Virtual size: 94KB

.qwqw
Size: 2KB - Virtual size: 537B

.sdsd
Size: 2KB - Virtual size: 103B

.xczxc
Size: 2KB - Virtual size: 200B

.asqea
Size: 2KB - Virtual size: 200B

.asqeax
Size: 2KB - Virtual size: 200B

.oapa
Size: 2KB - Virtual size: 82B

.CRT
Size: 2KB - Virtual size: 8B

.rsrc
Size: 18KB - Virtual size: 16KB

.reloc
Size: 2KB - Virtual size: 296KB