ddfdbfd354f9951f77924316e1afda96a0988ab9b65640bcf81567bac60f793e

Sharing

Copy URL

Twitter E-mail

General

Target

ddfdbfd354f9951f77924316e1afda96a0988ab9b65640bcf81567bac60f793e
Size

296KB
MD5

5bf2f6609786bf7b52b7ba7815736184
SHA1

ccf74d9b6637f023bf01b3205d9ffba4467ac2ce
SHA256

ddfdbfd354f9951f77924316e1afda96a0988ab9b65640bcf81567bac60f793e
SHA512

26f22d65ffb8e3cddcd329776f680efb206fb68091671fc0d1c08b498557094983094f348b6b355870760464d58f5391edf7f6c955d4a984029622ab30ab62aa
SSDEEP

6144:SxxojXRZjvG7clWxsiqOJwsaDw9+U0Rhql:zjXPYclEsiq2p19YRgl

Score

N/A

Malware Config

Signatures

Files

ddfdbfd354f9951f77924316e1afda96a0988ab9b65640bcf81567bac60f793e
.dll windows x86

057c679344eda44e709f2c5b3f930a34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
_vsnwprintf
_ultow
wcsstr
_splitpath
_snprintf
_wtol
_ltow
strncpy
wcstoul
_except_handler3
_snwprintf
_wmakepath
wcsncat
sprintf
_errno
_waccess
swprintf
wcsncmp
_wcsnicmp
wcscpy
wcsrchr
wcscat
_wsplitpath
wcscmp
_wcsicmp
_wstat
wcsncpy
wcslen
_winmajor

comctl32

ImageList_Create
ImageList_ReplaceIcon
PropertySheetW

shell32

SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc

kernel32

TerminateProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
CreateSemaphoreW
Sleep
UnhandledExceptionFilter
GetSystemTimeAsFileTime
ReleaseSemaphore
FormatMessageW
LocalFree
RaiseException
GetCurrentThreadId
IsBadReadPtr
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDriveStringsW
lstrlenW
WritePrivateProfileStringW
DeleteFileW
GetPrivateProfileStringW
OutputDebugStringW
GetLastError
WideCharToMultiByte
GetSystemDirectoryW
CreateDirectoryW
SetErrorMode
CloseHandle
GetCurrentProcess
GetCurrentThread
GetTickCount
LoadLibraryExA
InterlockedExchange
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
SetLastError
IsBadCodePtr
lstrcpynA
ExpandEnvironmentStringsA
GetFullPathNameA
GetDriveTypeA
SearchPathA
lstrlenA
OutputDebugStringA
GetModuleFileNameA
WaitForSingleObject
SetEvent
UnmapViewOfFile
FreeLibraryAndExitThread
WaitForMultipleObjects
MapViewOfFile
CreateFileMappingW
CreateThread
CreateEventW
GetTempPathW
DisableThreadLibraryCalls
GetVersionExA
DeleteCriticalSection
lstrcpynW
HeapDestroy
LeaveCriticalSection
HeapCompact
HeapSize
HeapReAlloc
HeapFree
InitializeCriticalSection
HeapAlloc
GetSystemInfo
GetModuleHandleA
HeapCreate
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetProcessHeap
ReleaseMutex
OpenFileMappingW
GetCurrentProcessId
OpenMutexA
CreateMutexA
GetVersionExW
EnterCriticalSection

advapi32

CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
RegNotifyChangeKeyValue
RegQueryValueExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
IsValidSid
EqualSid
DeregisterEventSource
ReportEventW
RegisterEventSourceW

user32

MoveWindow
GetSystemMetrics
GetWindowRect
GetParent
SendMessageW
GetDlgCtrlID
LoadStringW
GetDesktopWindow
MessageBoxA
GetWindowLongA
SetWindowLongA
GetDlgItem
GetWindowTextW
SetCursor
LoadCursorA
SendMessageA
EnableWindow
LoadIconA
MessageBoxW
IsWindow
LoadCursorW
GetClientRect
LoadBitmapA
ChildWindowFromPoint
ScreenToClient
GetMessagePos
SetFocus
LoadStringA

comdlg32

GetSaveFileNameW

Exports

Exports

CloseODBCPerfData
CollectODBCPerfData
CursorLibLockDbc
CursorLibLockDesc
CursorLibLockStmt
CursorLibTransact
DllBidEntryPoint
GetODBCSharedData
LockHandle
MpHeapAlloc
MpHeapCompact
MpHeapCreate
MpHeapDestroy
MpHeapFree
MpHeapReAlloc
MpHeapSize
MpHeapValidate
ODBCGetTryWaitValue
ODBCInternalConnectW
ODBCQualifyFileDSNW
ODBCSetTryWaitValue
OpenODBCPerfData
PostComponentError
PostODBCComponentError
PostODBCError
SQLAllocConnect
SQLAllocEnv
SQLAllocHandle
SQLAllocHandleStd
SQLAllocStmt
SQLBindCol
SQLBindParam
SQLBindParameter
SQLBrowseConnect
SQLBrowseConnectA
SQLBrowseConnectW
SQLBulkOperations
SQLCancel
SQLCloseCursor
SQLColAttribute
SQLColAttributeA
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLDescribeCol
SQLDescribeColA
SQLDescribeColW
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLDriverConnectA
SQLDriverConnectW
SQLDrivers
SQLDriversA
SQLDriversW
SQLEndTran
SQLError
SQLErrorA
SQLErrorW
SQLExecDirect
SQLExecDirectA
SQLExecDirectW
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLForeignKeys
SQLForeignKeysA
SQLForeignKeysW
SQLFreeConnect
SQLFreeEnv
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttr
SQLGetConnectAttrA
SQLGetConnectAttrW
SQLGetConnectOption
SQLGetConnectOptionA
SQLGetConnectOptionW
SQLGetCursorName
SQLGetCursorNameA
SQLGetCursorNameW
SQLGetData
SQLGetDescField
SQLGetDescFieldA
SQLGetDescFieldW
SQLGetDescRec
SQLGetDescRecA
SQLGetDescRecW
SQLGetDiagField
SQLGetDiagFieldA
SQLGetDiagFieldW
SQLGetDiagRec
SQLGetDiagRecA
SQLGetDiagRecW
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfo
SQLGetInfoA
SQLGetInfoW
SQLGetStmtAttr
SQLGetStmtAttrA
SQLGetStmtAttrW
SQLGetStmtOption
SQLGetTypeInfo
SQLGetTypeInfoA
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSql
SQLNativeSqlA
SQLNativeSqlW
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrepareA
SQLPrepareW
SQLPrimaryKeys
SQLPrimaryKeysA
SQLPrimaryKeysW
SQLProcedureColumns
SQLProcedureColumnsA
SQLProcedureColumnsW
SQLProcedures
SQLProceduresA
SQLProceduresW
SQLPutData
SQLRowCount
SQLSetConnectAttr
SQLSetConnectAttrA
SQLSetConnectAttrW
SQLSetConnectOption
SQLSetConnectOptionA
SQLSetConnectOptionW
SQLSetCursorName
SQLSetCursorNameA
SQLSetCursorNameW
SQLSetDescField
SQLSetDescFieldA
SQLSetDescFieldW
SQLSetDescRec
SQLSetEnvAttr
SQLSetParam
SQLSetPos
SQLSetScrollOptions
SQLSetStmtAttr
SQLSetStmtAttrA
SQLSetStmtAttrW
SQLSetStmtOption
SQLSpecialColumns
SQLSpecialColumnsA
SQLSpecialColumnsW
SQLStatistics
SQLStatisticsA
SQLStatisticsW
SQLTablePrivileges
SQLTablePrivilegesA
SQLTablePrivilegesW
SQLTables
SQLTablesA
SQLTablesW
SQLTransact
SearchStatusCode
VFreeErrors
VRetrieveDriverErrorsRowCol
ValidateErrorQueue
g_hHeapMalloc

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

057c679344eda44e709f2c5b3f930a34

Headers

File Characteristics

Imports

msvcrt

comctl32

shell32

kernel32

advapi32

user32

comdlg32

Exports

Exports

Sections

.text Size: 216KB - Virtual size: 214KB

.data Size: 4KB - Virtual size: 4KB

.sdbid Size: 60KB - Virtual size: 56KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 216KB - Virtual size: 214KB

.data
Size: 4KB - Virtual size: 4KB

.sdbid
Size: 60KB - Virtual size: 56KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB