e50f595e85b5aeb6eefe1d1dc74facfc331c654b451bc9c3315cb1939661362f

Sharing

Copy URL Twitter E-mail

General

Target

e50f595e85b5aeb6eefe1d1dc74facfc331c654b451bc9c3315cb1939661362f
Size

212KB
MD5

05e098f7e4376be5f40a475bb192a3da
SHA1

884c5c81f7466d8966d607067a7bb8088023a1a2
SHA256

e50f595e85b5aeb6eefe1d1dc74facfc331c654b451bc9c3315cb1939661362f
SHA512

248c53dbd372e8ba914ea2f25ab364ec03b1863dc5f3968737cc198d3caa9e1adaba9d670548250f3e217369b2cecc04f90742e23fb60dbebaea61e408274e2c
SSDEEP

3072:zHFIV4PrwxGTGAVrnIxg+nMRPjGjCmpys8Rjks7RMp3T/TxnnBQ:zHFIVerwxeGAVDD+nFssgjksw35nBQ

Score

N/A

Malware Config

Signatures

Files

e50f595e85b5aeb6eefe1d1dc74facfc331c654b451bc9c3315cb1939661362f
.exe windows x86

f06b45c20e943155627c747090d799a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FindClose
FindNextFileW
FindFirstFileW
GetLocalTime
FormatMessageA
GetLastError
MultiByteToWideChar
GetTempFileNameA
GetTempPathA
GetTempFileNameW
GetTempPathW
GetVersion
WideCharToMultiByte
CloseHandle
GetFileType
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
CreateDirectoryA
FormatMessageW
CopyFileW
GetFileAttributesA
GetFileAttributesW
GetSystemTime
GetFileTime
GetSystemTimeAsFileTime
DeleteFileW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetModuleHandleW
GetTimeFormatW
CreateFileW
GetDateFormatW
GetCurrentProcessId

msvcr71

wprintf
_wsetlocale
__CxxFrameHandler
??3@YAXPAX@Z
wcscpy
wcstoul
wcsncpy
fwprintf
difftime
_wcsicmp
memset
_wcsrev
wcschr
fflush
mktime
memcpy
puts
printf
_strrev
fputws
_putws
??_U@YAPAXI@Z
fclose
remove
_wremove
fopen
_wfopen
strcat
iswdigit
_wrename
memcmp
??2@YAPAXI@Z
_purecall
_snwprintf
free
realloc
qsort
rand
srand
memmove
_except_handler3
__security_error_handler
?terminate@@YAXXZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
swprintf
time
localtime
wcscat
wcsncat
wcslen
??_V@YAXPAX@Z
_wtol
wcscmp
_vsnwprintf

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

user32

LoadStringA
LoadStringW
wsprintfW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

GetErrorInfo
SysFreeString

sqlresld

SQLUILoadResourceDLL
SQLUIUnloadResourceDLL

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f06b45c20e943155627c747090d799a3

Headers

File Characteristics

Imports

kernel32

msvcr71

advapi32

user32

ole32

oleaut32

sqlresld

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 4KB - Virtual size: 44KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 4KB - Virtual size: 44KB

.rsrc
Size: 52KB - Virtual size: 52KB