40193a14b1b839f0c1af5d141caca1904b0b5be0ea974ed1c3007bbbd09368d4

Sharing

Copy URL Twitter E-mail

General

Target

40193a14b1b839f0c1af5d141caca1904b0b5be0ea974ed1c3007bbbd09368d4
Size

70KB
MD5

05b2ab71b97b204db22ad07214d2d221
SHA1

5fbb102b857a61c04ef60f4ae90af3eae60546bc
SHA256

40193a14b1b839f0c1af5d141caca1904b0b5be0ea974ed1c3007bbbd09368d4
SHA512

6a61d227a33930a00d20d29d8ce412f6df650348cdb64de6f2e79c0a20779cb4508f798411c4181ad3a222393d2ac3a977032b7472d1d75a1abb51b1a3c6dd86
SSDEEP

1536:C+AHVL1e6plWAMa6iixD4MKegprl08W+bLELiuIejy:CpHCekAMVlxDqLl0D+bALBjy

Score

N/A

Malware Config

Signatures

Files

40193a14b1b839f0c1af5d141caca1904b0b5be0ea974ed1c3007bbbd09368d4
.exe windows x86

898f0d1cc76056c2ae39cb5d09b3e778

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisconnectNamedPipe
VirtualAlloc
GetTapePosition
Heap32Next
GetStdHandle
LocalAlloc
GetFileSize
CreateEventA
OpenWaitableTimerA
BuildCommDCBA
LocalReAlloc
WriteConsoleInputA
GetCurrencyFormatA
GetPrivateProfileSectionA
LocalFileTimeToFileTime
GetEnvironmentStringsA
SetThreadLocale
FlushViewOfFile
DeleteTimerQueueEx
SetHandleCount
PurgeComm
OutputDebugStringA
LoadModule
SetHandleInformation
ProcessIdToSessionId
LocalShrink
EscapeCommFunction
GlobalFindAtomA
GetFileInformationByHandle
QueryDosDeviceA
SetVolumeMountPointA
GetStringTypeA
GetModuleFileNameA
SetLocaleInfoA
GetEnvironmentVariableA
CreateFileA
GetSystemDefaultLangID
GetConsoleMode
SetConsoleKeyShortcuts
HeapSize
RegisterWaitForSingleObjectEx
SetFilePointerEx
ReleaseSemaphore
FindFirstVolumeMountPointA
SearchPathA
ReleaseMutex
GetConsoleHardwareState
ExpandEnvironmentStringsA
GetVersionExA
MoveFileExA
LocalAlloc
GetVolumePathNameA
Thread32First
SetEndOfFile
GenerateConsoleCtrlEvent
IsBadCodePtr
Process32First
DebugBreak
GetCurrentThreadId
WriteConsoleOutputCharacterA
HeapQueryInformation
GetProfileStringA
GetAtomNameA
SetMailslotInfo
GlobalMemoryStatus
GetCurrentThread
GetTempPathA
GetConsoleOutputCP
SuspendThread
SetCommState
Thread32Next
FillConsoleOutputAttribute
RemoveDirectoryA
CreateDirectoryExA
FillConsoleOutputCharacterW
IsBadHugeReadPtr
FindNextVolumeA
OpenFileMappingA
CopyFileA
IsBadStringPtrA
GetOverlappedResult
GetDevicePowerState
GetPrivateProfileSectionNamesA
WriteProcessMemory
GetCPInfoExA
FillConsoleOutputCharacterA
lstrcatA
GetCPInfoExA
LCMapStringA
GetCurrentConsoleFont
GetNumberOfConsoleInputEvents
SetEvent
GetCompressedFileSizeA
_lread
WriteFileEx
EnumResourceTypesA
PeekConsoleInputA
LZClose
SetVolumeMountPointA
OpenEventA
GetDiskFreeSpaceExA
OpenProfileUserMapping
lstrcpyn
DeleteTimerQueueTimer
GetLogicalDrives
GetDefaultCommConfigA

dhcpcsvc

DhcpUndoRequestParams

d3d8

DebugSetMute

user32

ToUnicodeEx
GetInputDesktop
GetNextDlgTabItem
LoadStringA
FindWindowExA
PostMessageA
LoadMenuIndirectW
DrawFocusRect
CallWindowProcA
OpenDesktopA
LoadCursorA
TrackPopupMenu
GetRegisteredRawInputDevices
BroadcastSystemMessageExA
EnumDisplayDevicesA
GetMenuStringA
SetClipboardViewer
CloseWindow
UnregisterDeviceNotification
ReasonCodeNeedsComment
GetTopWindow
GetMonitorInfoA
CharUpperBuffW
GetWinStationInfo
GetTabbedTextExtentA
InSendMessageEx
HideCaret
GetKeyboardLayoutNameA
EnumWindows
GetClipboardOwner
LoadLocalFonts
DrawCaption
ShowWindowAsync
ShowCursor
GetClipboardFormatNameA
SetCaretBlinkTime
SetWinEventHook
LockWindowStation
UnpackDDElParam
AdjustWindowRectEx
UnregisterDeviceNotification
SetKeyboardState
CloseWindow
CharUpperA
EnumDesktopsA
LoadBitmapA
IsGUIThread
MapVirtualKeyExA
SetClipboardViewer
AlignRects
DialogBoxParamA
CheckRadioButton
UnregisterClassA
LoadMenuIndirectW
UpdatePerUserSystemParameters
GetMessageExtraInfo
SystemParametersInfoA
CallMsgFilter
GetSystemMetrics
LoadKeyboardLayoutEx
CharUpperBuffA
GetKeyboardLayoutNameA
TranslateMDISysAccel
OpenClipboard
FrameRect
ChangeMenuA
AllowSetForegroundWindow
RegisterShellHookWindow
PrivateExtractIconExA
LoadAcceleratorsA
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
CloseWindow
ScrollWindow
GetInputDesktop
SwitchDesktop
GetMenuStringA
SetShellWindow
CharNextA
IntersectRect
LoadCursorFromFileA
ChangeMenuA
SetCaretPos
GetUserObjectInformationA
SetMenuItemInfoA
GetSysColor
DeferWindowPos
DestroyCaret
SetCursor
IsWinEventHookInstalled
GetWindowTextLengthA
SetWindowsHookExW
RegisterTasklist
IntersectRect
GetCursor
TranslateMDISysAccel
DispatchMessageA
EnumWindows
CharToOemBuffW
UnregisterClassA
GetRawInputBuffer

crypt32

CertSerializeCertificateStoreElement

d3d9

Direct3DCreate9

odbc32

SQLSetStmtAttr
SQLExecute

Exports

Exports

EndBfjmbdchlce
Neuchqq
Oyhvnhscpw
OpenRlmnejc
WriteOtpdnoceei
Pchjettkjn
Rhqqripekij
InitHooeqnuldfi
AddTilhcch
IsJvaqdin
BeginJlqlcslcekw
ReadSsjkpru
SetOdnwoluuwt
ReadQexurmrqkn
Mdxpdkrsxt
EndCkxslwdi
GetXnegnjcnf
Xfxurnniwnq

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

898f0d1cc76056c2ae39cb5d09b3e778

Headers

File Characteristics

Imports

kernel32

dhcpcsvc

d3d8

user32

crypt32

d3d9

odbc32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 1024B - Virtual size: 600B

.idata Size: 5KB - Virtual size: 5KB

.rdata Size: 19KB - Virtual size: 123KB

.edata Size: 512B - Virtual size: 472B

.rsrc Size: 1024B - Virtual size: 80KB

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 1024B - Virtual size: 600B

.idata
Size: 5KB - Virtual size: 5KB

.rdata
Size: 19KB - Virtual size: 123KB

.edata
Size: 512B - Virtual size: 472B

.rsrc
Size: 1024B - Virtual size: 80KB