405054323ef3231b666da3071823d77093c6d8c18803278da3fb65a19c628ca4

Sharing

Copy URL Twitter E-mail

General

Target

405054323ef3231b666da3071823d77093c6d8c18803278da3fb65a19c628ca4
Size

40KB
MD5

f6f9293ba6180928104170cbcbceb749
SHA1

9e1129a7eec02e21733dcd1b3773f8985797bb65
SHA256

405054323ef3231b666da3071823d77093c6d8c18803278da3fb65a19c628ca4
SHA512

c482afbcc7c268744cc9932e72ee509a48d8176fae41a3521d427a44085fa8ac3ca9cce485bf9938b5ed726eec9545108d7f179934e73f5de8705edde4e49cbd
SSDEEP

768:dqLPpM55J1UXQHYtta/twd2BObrCgLa19MJTJRL1vZI:uP21MQHYX2OLafOTD

Score

N/A

Malware Config

Signatures

Files

405054323ef3231b666da3071823d77093c6d8c18803278da3fb65a19c628ca4
.exe windows x86

589625dc1d505cff6e1fc323bd4347f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc

user32

EmptyClipboard
OpenClipboard
SetClipboardData
CloseClipboard

libeay32

ord341
ord3040
ord3106
ord3033
ord3024
ord502
ord504
ord503
ord342
ord340

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

axdbe20

?Cmd@CSimDB@@QAAXPBDZZ
?Exec@CSimDB@@QAEJXZ
?GetLastErrMsg@CSimDB@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Open@CSimDB@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000@Z
??0CSimDB@@QAE@XZ
??1CSimDB@@UAE@XZ

msvcrt

_controlfp
__set_app_type
__p__fmode
malloc
??2@YAPAXI@Z
exit
printf
_getch
scanf
strchr
_strupr
sprintf
__CxxFrameHandler
memmove
srand
rand
time
_ftol
free
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Exports

Exports

??0CSimDB@@QAE@ABV0@@Z
??4CSimDB@@QAEAAV0@ABV0@@Z
??_7CSimDB@@6B@

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

589625dc1d505cff6e1fc323bd4347f4

Headers

File Characteristics

Imports

kernel32

user32

libeay32

msvcp60

axdbe20

msvcrt

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 8KB - Virtual size: 42KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 8KB - Virtual size: 42KB