707638ddd23a1a48f4ae4162dbe34e414ef619f988f066f2bfc098576c659c73

Sharing

Copy URL

Twitter E-mail

General

Target

707638ddd23a1a48f4ae4162dbe34e414ef619f988f066f2bfc098576c659c73
Size

48KB
MD5

4f84819aacd948a10c2be9e94c842d4a
SHA1

2005a7e1e3807feef8bbe8f34a42eeca7e34f38e
SHA256

707638ddd23a1a48f4ae4162dbe34e414ef619f988f066f2bfc098576c659c73
SHA512

b0688419c33c485525302494addc64229f7584e5b3b34dadcfa58f7e3f018368fa30aa0e84908b446807b4c60350f69a1ab71340ccb0c9e61440870ddff11dae
SSDEEP

1536:kAF/Q3E85S38sWgtdGrN/9EpicH5/d9pH:kAF/QPcssW5/ipP5/d9

Score

N/A

Malware Config

Signatures

Files

707638ddd23a1a48f4ae4162dbe34e414ef619f988f066f2bfc098576c659c73
.exe windows x86

1f3cb865725aa211014e10207bc53f2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

odbc32

SQLColumns
SQLDataSourcesA
SQLTablePrivilegesW
SQLForeignKeys
SQLDisconnect
CursorLibLockStmt
VFreeErrors
SQLSetConnectAttr
SQLCancel
SQLNumResultCols
SQLAllocHandleStd
SQLStatistics
SQLColAttributeW
CursorLibLockDesc
SQLGetCursorNameA
SQLExtendedFetch
SQLSetStmtAttrW
SQLAllocStmt
SQLConnectW
SQLGetDiagRecW
PostODBCComponentError
SQLNumParams
SQLBindParam

mscat32

CryptCATAdminReleaseContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
CryptCATCDFOpen
CryptCATCDFClose
IsCatalogFile
MsCatFreeHashTag
CryptCATPutMemberInfo
CryptCATCDFEnumAttributes
CryptCATEnumerateCatAttr
CryptCATStoreFromHandle
CryptCATCDFEnumCatAttributes
CryptCATEnumerateMember
CryptCATOpen
CryptCATPersistStore
CryptCATCDFEnumMembersByCDFTagEx
MsCatConstructHashTag
CryptCATGetAttrInfo

kernel32

LoadLibraryA
SetConsoleCursorInfo
QueryPerformanceCounter
EnumResourceTypesW
ReadFile
GetCurrentThread
CreateTapePartition
DeleteTimerQueueTimer
GetConsoleAliasesLengthW
GetConsoleAliasW
EnumUILanguagesW
SetVolumeLabelW
RtlMoveMemory
GetSystemDefaultLCID
VirtualAlloc
GetStringTypeW
_hwrite
IsDBCSLeadByte
SetConsoleWindowInfo
SetLastError
SetMessageWaitingIndicator
GetStartupInfoA

cryptdll

CDBuildIntegrityVect
MD5Update
MD5Init
CDRegisterRng
CDLocateCSystem
CDLocateRng
MD5Final
CDRegisterCSystem
CDFindCommonCSystemWithKey
CDLocateCheckSum
CDBuildVect
CDFindCommonCSystem
CDGenerateRandomBits
CDRegisterCheckSum

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f3cb865725aa211014e10207bc53f2f

Headers

DLL Characteristics

File Characteristics

Imports

odbc32

mscat32

kernel32

cryptdll

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB