cffcb013ddab3ad611c9e9c4ad0f197ed805912dce3501dda61c4963b110aa33

Sharing

Copy URL Twitter E-mail

General

Target

cffcb013ddab3ad611c9e9c4ad0f197ed805912dce3501dda61c4963b110aa33
Size

336KB
MD5

2002d6b747d6625c70333b72afda49be
SHA1

12f62250f2f1bec5bf9d18a94d50746659542604
SHA256

cffcb013ddab3ad611c9e9c4ad0f197ed805912dce3501dda61c4963b110aa33
SHA512

14283cf851475d8450545a12453820d1c1e35a5492331475ce1df9fef1ba98ccdb7f5031b1f28ab911795300a17111f5494b5217d36abe9b6cd5f45586188f87
SSDEEP

6144:nonqneM55IpQrWmqU1YE5H3mrMw7T6r5SK5tSIAbASWlGqnlz3mBkFZHbOjPfLl:noQ9OmqUHH3Yt7e9SvAScB3Z7Oj

Score

N/A

Malware Config

Signatures

Files

cffcb013ddab3ad611c9e9c4ad0f197ed805912dce3501dda61c4963b110aa33
.exe windows x86

6b9499533a7a75b505e7664035437a68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrencyFormatA
GetComputerNameExW
GlobalMemoryStatus
GetBinaryTypeW
HeapWalk
CreateFileA
LoadLibraryA
ReadConsoleInputA
DeleteFileA
FindNextChangeNotification
GetLongPathNameA
SetFileShortNameW
GetModuleFileNameW
BaseCleanupAppcompatCacheSupport
FreeEnvironmentStringsW
EnumSystemLanguageGroupsW
MoveFileWithProgressW
SetHandleCount
GetConsoleHardwareState
VirtualAlloc
InitAtomTable
GetExitCodeProcess
SetSystemTimeAdjustment
GlobalFindAtomA
LoadResource
IsBadWritePtr
InterlockedPushEntrySList
GetEnvironmentStringsA
CreateFileW
GetCurrentProcessId
IsValidLocale
WriteFileEx
FatalAppExitW
CreateSemaphoreW
SetConsoleDisplayMode
RemoveDirectoryA
PrepareTape
FindClose
CreateProcessInternalW
EnumCalendarInfoExA
BuildCommDCBAndTimeoutsW
DeleteCriticalSection
UnhandledExceptionFilter
WaitForSingleObjectEx

sqlunirl

_CreateDC_@16
_SystemParametersInfo_@16
_GetMenuString_@20
_tfopen
_WinHelp@16
_GetMenuItemInfo_@16
_LoadIcon@8
_lstrcmp_@8
_OemToCharBuff_@12
_RegQueryMultipleValues_@20
_GetLogicalDriveStrings_@8
_GlobalGetAtomName_@12
_NDdeIsValidAppTopicList_@4
_CreateAcceleratorTable_@8
_FindResource@12
_Shell_NotifyIcon_@8
_NDdeGetErrorString_@12
_GetTimeFormat_@24
_wvsprintf_@12
_EnumFontFamilies_@16
_EndUpdateResource_@8
_FormatMessage@28

user32

SetWinEventHook
DdeInitializeW
SendNotifyMessageW
DdeConnectList
UnloadKeyboardLayout
IsWindow
IsChild
AdjustWindowRectEx
GetGUIThreadInfo
RegisterShellHookWindow
FrameRect
MessageBeep
AlignRects
CascadeChildWindows
PrivateExtractIconExW
MapVirtualKeyExW

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b9499533a7a75b505e7664035437a68

Headers

File Characteristics

Imports

kernel32

sqlunirl

user32

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 212KB - Virtual size: 211KB

.data Size: 1024B - Virtual size: 391KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 212KB - Virtual size: 211KB

.data
Size: 1024B - Virtual size: 391KB

.rsrc
Size: 18KB - Virtual size: 18KB