819c1c18a5218beeb3ded0408eaf0c92f71732df2c0626ac3a58c28b47f93bda

Sharing

Copy URL Twitter E-mail

General

Target

819c1c18a5218beeb3ded0408eaf0c92f71732df2c0626ac3a58c28b47f93bda
Size

106KB
MD5

849eb23af268a627140e84904d051ef0
SHA1

01e3fe76d5445549e7bb48b3875c0073de9d87ea
SHA256

819c1c18a5218beeb3ded0408eaf0c92f71732df2c0626ac3a58c28b47f93bda
SHA512

299afeb45278261af12af6989a45729a979accb676533c9c81155f9375aa38401fbbca23f426e317b9f2335889fd92a8438df78cc82872842aa1555cef056d3e
SSDEEP

1536:n40uxCWizrI/Vlm4U1OO4SrWBcT4GOzVgtBCi6GCq2iW7z:n4cnig1OvSrQcT4GOI4RGCH

Score

N/A

Malware Config

Signatures

Files

819c1c18a5218beeb3ded0408eaf0c92f71732df2c0626ac3a58c28b47f93bda
.exe windows x86

4846d5bc884bb749e90afbcf7a184d38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dvacore

?SetClientVersion@config@dvacore@@YAXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?what@lock_error@boost@@UBEPBDXZ
??1lock_error@boost@@UAE@XZ
?what@thread_resource_error@boost@@UBEPBDXZ
??1thread_resource_error@boost@@UAE@XZ
?what@unsupported_thread_option@boost@@UBEPBDXZ
??1unsupported_thread_option@boost@@UAE@XZ
?what@invalid_thread_argument@boost@@UBEPBDXZ
??1invalid_thread_argument@boost@@UAE@XZ
?what@thread_permission_error@boost@@UBEPBDXZ
??0File@filesupport@dvacore@@QAE@XZ
?ExecutableDir@commondirs@filesupport@dvacore@@YA?AVDir@23@XZ
??0File@filesupport@dvacore@@QAE@ABVDir@12@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??4File@filesupport@dvacore@@QAEXABV012@@Z
?Exists@File@filesupport@dvacore@@QBE_NXZ
?FullPath@File@filesupport@dvacore@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?ResolveIT@FileUtils@utility@dvacore@@YAJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AA_N@Z
?FindAppFromExtension@utility@dvacore@@YAXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAVFile@filesupport@2@@Z
??1Dir@filesupport@dvacore@@QAE@XZ
??0Guid@utility@dvacore@@QAE@ABU_GUID@@@Z
?AsString@Guid@utility@dvacore@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?UTF16to8@utility@dvacore@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@4@@Z
??0Guid@utility@dvacore@@QAE@ABV012@@Z
?SetClientName@config@dvacore@@YAXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?SetCompanyName@config@dvacore@@YAXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??1thread_exception@boost@@UAE@XZ
?SetClientInternalVersion@config@dvacore@@YAXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?SetDisableFileWrites@debug@dvacore@@YAX_N@Z
?mDisableFileWritesB@DebugDatabase@debug@dvacore@@0_NA
??0Guid@utility@dvacore@@QAE@XZ
?UTF8to16@utility@dvacore@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@4@@Z
?AsciiToUTF16@utility@dvacore@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PBD@Z
?CreateUnique@Guid@utility@dvacore@@SA?AV123@XZ
??4Guid@utility@dvacore@@QAEAAV012@ABV012@@Z
??6utility@dvacore@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV23@ABVGuid@01@@Z
??0File@filesupport@dvacore@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?GetGUID@Guid@utility@dvacore@@QBEABU_GUID@@XZ
??1File@filesupport@dvacore@@QAE@XZ
??1Guid@utility@dvacore@@QAE@XZ
?FullPathMultiByte@File@filesupport@dvacore@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1thread_permission_error@boost@@UAE@XZ

kernel32

GetStartupInfoW
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
TerminateProcess
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
GetProcessHeap
HeapFree
lstrlenA
GetCommandLineW
SetEvent
CreateEventW
CreateThread
GetCurrentThreadId
WaitForSingleObject
CloseHandle
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrcmpiW
Sleep
GetTickCount
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW

user32

SetTimer
PostThreadMessageW
GetMessageW
DispatchMessageW
TranslateMessage
PostMessageW
CharUpperW
FindWindowA
CharNextW
UnregisterClassA

advapi32

RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
StringFromGUID2

oleaut32

RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
VarUI4FromStr
SysAllocStringLen
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysStringLen

msvcp80

?_Xlen@_String_base@std@@SAXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Xran@_String_base@std@@SAXXZ

msvcr80

_crt_debugger_hook
_invoke_watson
_controlfp_s
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_except_handler4_common
strncpy
wcscat_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??_V@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
wcsncpy_s
_CxxThrowException
free
malloc
memcpy_s
??3@YAXPAX@Z
wcscpy_s
__set_app_type
__p__fmode
__p__commode
??4exception@std@@QAEAAV01@ABV01@@Z
_makepath
_splitpath
_spawnl
_invalid_parameter_noinfo
memmove_s
_purecall
_recalloc
memset
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
??0exception@std@@QAE@ABV01@@Z
_amsg_exit

Exports

Exports

??0invalid_thread_argument@boost@@QAE@ABV01@@Z
??0lock_error@boost@@QAE@ABV01@@Z
??0thread_exception@boost@@QAE@ABV01@@Z
??0thread_permission_error@boost@@QAE@ABV01@@Z
??0thread_resource_error@boost@@QAE@ABV01@@Z
??0unsupported_thread_option@boost@@QAE@ABV01@@Z
??4invalid_thread_argument@boost@@QAEAAV01@ABV01@@Z
??4lock_error@boost@@QAEAAV01@ABV01@@Z
??4thread_exception@boost@@QAEAAV01@ABV01@@Z
??4thread_permission_error@boost@@QAEAAV01@ABV01@@Z
??4thread_resource_error@boost@@QAEAAV01@ABV01@@Z
??4unsupported_thread_option@boost@@QAEAAV01@ABV01@@Z
??_7invalid_thread_argument@boost@@6B@
??_7lock_error@boost@@6B@
??_7thread_exception@boost@@6B@
??_7thread_permission_error@boost@@6B@
??_7thread_resource_error@boost@@6B@
??_7unsupported_thread_option@boost@@6B@

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

΄�<�ug
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4846d5bc884bb749e90afbcf7a184d38

Headers

File Characteristics

Imports

dvacore

kernel32

user32

advapi32

ole32

oleaut32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 5KB

΄�<�ug Size: 16KB - Virtual size: 20KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 5KB

΄�<�ug
Size: 16KB - Virtual size: 20KB