8db848e6f5e36bfa62939212f540f8fc9ae5c4f0ed2d164cb53dcd63d3f0ba27

Sharing

Copy URL Twitter E-mail

General

Target

8db848e6f5e36bfa62939212f540f8fc9ae5c4f0ed2d164cb53dcd63d3f0ba27
Size

854KB
MD5

850ecf6cdaca5923306e41fbca486e9c
SHA1

1abf8e9c94ee7236554bcce742b889892e782e15
SHA256

8db848e6f5e36bfa62939212f540f8fc9ae5c4f0ed2d164cb53dcd63d3f0ba27
SHA512

7edd7b33c1c1e84f40c4a7e1585e549658328d6fd6509d2539d8ecfe509112d4a304600f2a94aa88efcfff1cf2a4569dda35aa06f0d66a94634ed8edece69dd3
SSDEEP

24576:8bb2O9EUQjWg/MBhiWmp5FqX7zGkA70VA+Y:8baOKUGWqMw8X7zGk0A

Score

N/A

Malware Config

Signatures

Files

8db848e6f5e36bfa62939212f540f8fc9ae5c4f0ed2d164cb53dcd63d3f0ba27
.exe windows x86

cc47de22c153ba99d1a608317236d03e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathMakeSystemFolderA
PathIsUNCServerShareW
StrTrimA
PathIsFileSpecW
PathRemoveFileSpecA
PathCreateFromUrlA
SHEnumValueW
StrStrNW
SHStrDupW
SHCopyKeyW
PathAppendW
StrDupA
PathCompactPathA
StrFromTimeIntervalA
SHRegSetUSValueA
StrToInt64ExA
SHSetValueW
StrIsIntlEqualW
PathUnExpandEnvStringsA
UrlGetPartW
PathFindFileNameA

kernel32

SetLastError
GetStartupInfoA
GetProcessAffinityMask
GetCurrentThread
GetSystemPowerStatus
SetThreadUILanguage
EndUpdateResourceA
_lread
GetNamedPipeInfo
SetFileShortNameA
VirtualAlloc
FlushConsoleInputBuffer
GetNumaNodeProcessorMask
LoadLibraryA
OpenJobObjectA
GetUserDefaultUILanguage
BaseCleanupAppcompatCacheSupport
QueryPerformanceCounter
OpenWaitableTimerA

polstore

IPSecCopyFilterSpec
IPSecCopyFilterData
IPSecFreeMulPolicyData
IPSecUnassignPolicy
IPSecCreateFilterData
IPSecFreePolStr
IPSecAllocPolMem
IPSecSetNFAData
IPSecDeleteNFAData
IPSecClosePolicyStore
IPSecImportPolicies
IPSecGetISAKMPData
IPSecCreateISAKMPData
IPSecOpenPolicyStore
IPSecFreeMulNFAData
IPSecCreateNFAData
IPSecSetISAKMPData
IPSecCopyNegPolData

odbc32

SQLForeignKeysA
SQLErrorW
ODBCSetTryWaitValue
SQLDataSourcesA
SQLSetConnectAttr
SQLDescribeParam
SQLExtendedFetch
SQLSpecialColumnsA
SQLColumns
LockHandle
SQLSetParam
SQLGetStmtAttrA
SQLBrowseConnect
SQLEndTran
SQLGetData
SQLProcedureColumnsA
SQLColumnPrivileges
SQLDisconnect

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc47de22c153ba99d1a608317236d03e

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

polstore

odbc32

Sections

.text Size: 747KB - Virtual size: 746KB

.rdata Size: 99KB - Virtual size: 99KB

.data Size: 3KB - Virtual size: 1.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 747KB - Virtual size: 746KB

.rdata
Size: 99KB - Virtual size: 99KB

.data
Size: 3KB - Virtual size: 1.5MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB