41c113f59ec7c83a9e046d2705b14f16e64cb7eaf9e6f05bf197a78eb924141d

Sharing

Copy URL Twitter E-mail

General

Target

41c113f59ec7c83a9e046d2705b14f16e64cb7eaf9e6f05bf197a78eb924141d
Size

385KB
MD5

93b6337c9efbe2c3d8b665342ed6d543
SHA1

e9bd12baac53db6004293fa201f6ff2f605f2388
SHA256

41c113f59ec7c83a9e046d2705b14f16e64cb7eaf9e6f05bf197a78eb924141d
SHA512

1798867ab9a1d91693101687b9a575515962f584c41f2241fa65d3dab83bbb65f39effacbaad96e014e90b41768f4719826b1325ef4a9442b69296d93a5206f2
SSDEEP

6144:X52DLqOIrKeMEOHNeN+LvRBCdr6e9g5Lw5Epl0nKw88VcO92aM0f3nebNfL4dWTV:pAtQBCeN+rGFG5LZvvkGPFy2SQTFu6

Score

N/A

Malware Config

Signatures

Files

41c113f59ec7c83a9e046d2705b14f16e64cb7eaf9e6f05bf197a78eb924141d
.exe windows x86

97fe52729992321fef3eec72f702d405

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAGetServiceClassInfoA
closesocket
getsockopt
getservbyport
WSALookupServiceBeginW
WSASocketW
socket
WSAIsBlocking
htonl
WSAAsyncGetServByPort
WSASend
WSACancelBlockingCall
WSAAsyncGetProtoByName
WSAStringToAddressA
WSACloseEvent
recv
WSAGetLastError
WEP
WSCEnumProtocols
WSCWriteProviderOrder
WSANtohs
setsockopt
WSAAsyncGetServByName
WSAInstallServiceClassA
WSAConnect
WSASocketA
inet_ntoa
WSAAddressToStringW

kernel32

DeleteTimerQueue
GetStartupInfoW
FindVolumeClose
GetShortPathNameA
ShowConsoleCursor
GetPrivateProfileIntA
GetLongPathNameW
WriteProcessMemory
GetVolumePathNamesForVolumeNameW
CreateJobSet
SetCommConfig
GetTickCount
GetPrivateProfileSectionNamesA
CmdBatNotification
DebugSetProcessKillOnExit
WritePrivateProfileStructW
GetConsoleInputWaitHandle
WriteProfileSectionA
GetCurrentProcessId
QueryPerformanceCounter
lstrcatA
PostQueuedCompletionStatus
GetBinaryType
SetConsoleCtrlHandler
GetCurrentThreadId
GetVolumeInformationW
GlobalFix
GetShortPathNameW
LoadLibraryA
BackupRead
VirtualAlloc
CompareStringW
WTSGetActiveConsoleSessionId
EndUpdateResourceA

odbcjt32

SQLSetPos
SQLProcedureColumnsW
SQLNumParams
SQLNativeSqlW
SQLAllocHandle
SQLSetStmtAttrW
SQLGetInfoW
SQLSetEnvAttr
SQLGetTypeInfoW
SQLGetDiagFieldW
SQLGetData
SQLEndTran
SQLSetCursorNameW
ConfigDSN
InvisibleSelectDb
SQLAllocStmt
SQLGetDescRecW
RepairCompactProc
SQLDriverConnectW
SQLGetDescFieldW
InitDialogAgain
SQLBindCol
SQLSetScrollOptions
SQLPutData
SQLExtendedFetch
SQLExecDirectW

msvcrt40

ldiv
??_Distream@@QAEXXZ
??0ofstream@@QAE@ABV0@@Z
getwchar
sqrt
?lockptr@ios@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
??0strstream@@QAE@PADHH@Z
_ismbcupper
_ismbcsymbol
getenv
_environ
_endthreadex
??_8istream_withassign@@7B@
iswcntrl
__setusermatherr
_adj_fdivr_m32i
??_7__non_rtti_object@@6B@
??_Gios@@UAEPAXI@Z
strtod
??0stdiostream@@QAE@ABV0@@Z

ws2help

WahEnumerateHandleContexts
WahReferenceContextByHandle
WahCompleteRequest
WahNotifyAllProcesses
WahEnableNonIFSHandleSupport
WahCreateNotificationHandle
WahCreateSocketHandle
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahOpenHandleHelper
WahInsertHandleContext
WahDisableNonIFSHandleSupport
WahWaitForNotification
WahCloseThread
WahRemoveHandleContext
WahOpenNotificationHandleHelper
WahCreateHandleContextTable
WahOpenCurrentThread
WahOpenApcHelper
WahCloseHandleHelper
WahDestroyHandleContextTable
WahCloseApcHelper
WahQueueUserApc

msoeacct

GetDllMajorVersion
ValidEmailAddress
DllGetClassObject
DllCanUnloadNow
HrCreateAccountManager

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 759KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97fe52729992321fef3eec72f702d405

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

odbcjt32

msvcrt40

ws2help

msoeacct

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 65KB - Virtual size: 64KB

.data Size: 276KB - Virtual size: 759KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 36KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 236B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 65KB - Virtual size: 64KB

.data
Size: 276KB - Virtual size: 759KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 36KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 236B