5ce79789579c603260741616ddfe8a8ab5f785ef84a52fc9db6b3c8fbc6eb67e

General

Target

5ce79789579c603260741616ddfe8a8ab5f785ef84a52fc9db6b3c8fbc6eb67e
Size

125KB
MD5

9046441f41fb9892d18a889c98013b61
SHA1

a0ee6f8bd812a17885b7bb13fd0de1bb210ca3c3
SHA256

5ce79789579c603260741616ddfe8a8ab5f785ef84a52fc9db6b3c8fbc6eb67e
SHA512

17f2d673e3e993282c847b7833d8ebff1a527c1c2039aa123a3e8b8744c55b9f12852980a04d3d66b903a122b8a494d8156035f123b3a3f0bffcdaa94dd4d347
SSDEEP

3072:dh8Th7J91axukfVHFIM6A3BIH2gDkuN/UpOu/PMAtGlTu0gVgDOzD0dl:78t7NaDc/A3OWgDbNKOu/Pz2yXa

Score

N/A

Malware Config

Signatures

Files

5ce79789579c603260741616ddfe8a8ab5f785ef84a52fc9db6b3c8fbc6eb67e
.exe windows x86

b86b9bc9aec086602acc01056fb54cbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fseek
ftell
fread
__p__iob
fclose
strlen
strcpy
malloc
free
calloc
fprintf
vsprintf
realloc
strncpy
_CIpow
ceil
floor
printf
memmove
_errno
_msize

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetExitCodeProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

user32

GetForegroundWindow

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b86b9bc9aec086602acc01056fb54cbf

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

odbc32

Sections

.code Size: 9KB - Virtual size: 9KB

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 4KB

.code
Size: 9KB - Virtual size: 9KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 4KB