78d824f0d35e9078494c3b229484abae4a921ca59a1482d046abbcf8f02b8795

Sharing

Copy URL Twitter E-mail

General

Target

78d824f0d35e9078494c3b229484abae4a921ca59a1482d046abbcf8f02b8795
Size

936KB
MD5

90061dae0fdab8aab9a36dbee885774e
SHA1

1c844356f4e592f921fe1302b7a717fca969334b
SHA256

78d824f0d35e9078494c3b229484abae4a921ca59a1482d046abbcf8f02b8795
SHA512

96115793e6125e0cc1d7c15e2f79faa0dc27b0d3e54b4320ee42e5cd2e31174e8b0a1b72f6714c435e8d5889cb122e79aaf7373063dddb84b9e10220cf686a00
SSDEEP

24576:9bE7eCPycZ5vq/awh6g9+AytUZqH1/PMg+QI:YjvzG6gLyWZqHX+7

Score

N/A

Malware Config

Signatures

Files

78d824f0d35e9078494c3b229484abae4a921ca59a1482d046abbcf8f02b8795
.exe windows x86

3b6689ea36d140996782900de75e428d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

secur32

LsaUnregisterPolicyChangeNotification
LsaCallAuthenticationPackage
LsaDeregisterLogonProcess
QuerySecurityPackageInfoW
InitSecurityInterfaceW
GetUserNameExW
DeleteSecurityContext
LsaLookupAuthenticationPackage
LsaConnectUntrusted
TranslateNameW
FreeCredentialsHandle
LsaRegisterLogonProcess
QueryContextAttributesW
LsaFreeReturnBuffer
AcquireCredentialsHandleW
LsaGetLogonSessionData
LsaRegisterPolicyChangeNotification
AcceptSecurityContext
QuerySecurityContextToken
InitializeSecurityContextW
GetComputerObjectNameW
ApplyControlToken
EncryptMessage
LsaLogonUser
EnumerateSecurityPackagesW
DecryptMessage
FreeContextBuffer

kernel32

UnlockFile
OpenSemaphoreA
CreateThread
SetThreadExecutionState
GetLogicalDrives
WriteConsoleInputA
InterlockedExchangeAdd
IsBadReadPtr
WaitForSingleObject
GetVolumeNameForVolumeMountPointA
SetDefaultCommConfigW
EnumResourceTypesW
SetConsoleCtrlHandler
InitializeCriticalSection
FindAtomW
SetConsoleMode
GetStringTypeExW
SetSystemTime
ConnectNamedPipe
DosPathToSessionPathW
GenerateConsoleCtrlEvent
GetLocaleInfoW
GlobalFindAtomA
GetUserDefaultLCID
VirtualAlloc
OpenFileMappingA
CopyFileW
Module32NextW
OpenMutexA

odbc32

PostODBCError
CursorLibLockDbc
PostODBCComponentError
CursorLibLockStmt
CursorLibTransact
SQLGetDiagRecA
VFreeErrors
SearchStatusCode
ValidateErrorQueue
LockHandle
CursorLibLockDesc
VRetrieveDriverErrorsRowCol

msacm32

acmDriverOpen
acmStreamSize
acmDriverClose
acmStreamUnprepareHeader
acmDriverEnum
acmMetrics
acmStreamClose
acmStreamOpen
acmFormatTagDetailsW
acmFormatSuggest
acmStreamPrepareHeader
acmFormatChooseW
acmGetVersion
acmFormatDetailsW
acmStreamConvert

Sections

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 86KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 181KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 54KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 193KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 207KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 82KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b6689ea36d140996782900de75e428d

Headers

DLL Characteristics

File Characteristics

Imports

secur32

kernel32

odbc32

msacm32

Sections

.idata Size: 9KB - Virtual size: 8KB

.idata Size: 9KB - Virtual size: 8KB

.idata Size: 4KB - Virtual size: 3KB

.text Size: 86KB - Virtual size: 452KB

.bss Size: 181KB - Virtual size: 270KB

.edata Size: 54KB - Virtual size: 115KB

BSS Size: 193KB - Virtual size: 230KB

.idata Size: 207KB - Virtual size: 355KB

.edata Size: 82KB - Virtual size: 110KB

.rsrc Size: 110KB - Virtual size: 109KB

.idata
Size: 9KB - Virtual size: 8KB

.idata
Size: 9KB - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 3KB

.text
Size: 86KB - Virtual size: 452KB

.bss
Size: 181KB - Virtual size: 270KB

.edata
Size: 54KB - Virtual size: 115KB

BSS
Size: 193KB - Virtual size: 230KB

.idata
Size: 207KB - Virtual size: 355KB

.edata
Size: 82KB - Virtual size: 110KB

.rsrc
Size: 110KB - Virtual size: 109KB