04324ed9e89f31badd9454017564d4d73f91f63bf814f2cdf07840f81fbb0368

Sharing

Copy URL Twitter E-mail

General

Target

04324ed9e89f31badd9454017564d4d73f91f63bf814f2cdf07840f81fbb0368
Size

168KB
MD5

91a17a13293dceee54245e662e43c4a6
SHA1

78e7f0d7762d6d172729653bfc7f82baaec26004
SHA256

04324ed9e89f31badd9454017564d4d73f91f63bf814f2cdf07840f81fbb0368
SHA512

1caf8fcf6d4325330c38186c80939c1b01a1c937af9673153d36bda2550ecd95d39594bdb436da44410747908d970251469b4f7e93824b49de435bfb1c0a302e
SSDEEP

3072:UbSjqIgbbr7S5iGj76oE5A6rxK2EwWBb4OYrg:Ub6T+LS5iimA6d0

Score

N/A

Malware Config

Signatures

Files

04324ed9e89f31badd9454017564d4d73f91f63bf814f2cdf07840f81fbb0368
.dll windows x86

593e884bdae455cebcb2c659bb85f33a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hsbase

apt_time_tab
apt_debug_tab
datatypes_array
apt_logon_tab
apt_system_tab
apt_datatype_tab
apt_dynstr_tab
apt_kernel_tab
nv_collect_tab
nv_memory_manager
apt_records_tab
apt_str_tab
apt_sql_util_tab
apt_dbtype_tab
apt_errors_tab

odbc32

ord6
ord61
ord47
ord63
ord66
ord60
ord65
ord53
ord54
ord67
ord42
ord45
ord44
ord49
ord50
ord48
ord51
ord59
ord41
ord58
ord40
ord72
ord1
ord23
ord20
ord18
ord43
ord16
ord15
ord14
ord13
ord12
ord11
ord19
ord10
ord9
ord8
ord7
ord4
ord3
ord57
ord2

kernel32

TerminateProcess
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue

Exports

Exports

apt_eut_odbcint

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

593e884bdae455cebcb2c659bb85f33a

Headers

File Characteristics

Imports

hsbase

odbc32

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 65KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 4KB - Virtual size: 1016B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 68KB - Virtual size: 65KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 8KB - Virtual size: 6KB