d498712d5a28d0dc143d6501e704740802b5dcfde1aad043cd67a40965627f1d

Sharing

Copy URL Twitter E-mail

General

Target

d498712d5a28d0dc143d6501e704740802b5dcfde1aad043cd67a40965627f1d
Size

200KB
MD5

070cadc25dfedcd597ef994c8317e343
SHA1

4797c0db256ed1d3ee8b5c225ac41891608b1f61
SHA256

d498712d5a28d0dc143d6501e704740802b5dcfde1aad043cd67a40965627f1d
SHA512

87b41a4e05e9314ed31604ba35172ecc3b224ba8ee2bbc4f1e78d4be9753f865cb4a7523edf3729ce9f57bfbccfcd489675570341d90532ef7ed8fb0a24acd5d
SSDEEP

3072:IGSYtBkK8PcAHnDCqN/QjSsbl8qaONBmbDycr5gGDSyqZ3B3uS9aIYK36N9zdtlY:Iak1P7HnAtaDmdzA3fGW+2CRZQhaTp

Score

N/A

Malware Config

Signatures

Files

d498712d5a28d0dc143d6501e704740802b5dcfde1aad043cd67a40965627f1d
.exe windows x86

1ee367ff0410c373462b72592a1ba797

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
DebugBreak
GetEnvironmentVariableW
GetVersionExW
ExitProcess
SetConsoleCtrlHandler
CreateFileW
GetModuleFileNameW
WriteFile
FlushFileBuffers
GetLocalTime
CloseHandle
LocalFree
FormatMessageW
GetFileAttributesW
GetComputerNameW
Sleep
GetACP
HeapSize
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
InterlockedExchange
GetCPInfo
GetLocaleInfoA
IsBadWritePtr
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
ReadFile
GetCurrentProcess
TerminateProcess
GetProcAddress
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
RtlUnwind
RaiseException
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetOEMCP

user32

LoadStringW

odbc32

ord140
ord153
ord136
ord139
ord132
ord75
ord108
ord127
ord4
ord43
ord13
ord18
ord20
ord61
ord5
ord111
ord12
ord119
ord31
ord9
ord150
ord141
ord24

odbcbcp

ord19
ord9
ord18
ord12
ord8
ord4

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ee367ff0410c373462b72592a1ba797

Headers

File Characteristics

Imports

kernel32

user32

odbc32

odbcbcp

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 84KB - Virtual size: 84KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 84KB - Virtual size: 84KB