8be1c0c207447a0bc82735c4dce6a79ff9c7e2852240a04b1ea9bb290d151e42

Sharing

Copy URL Twitter E-mail

General

Target

8be1c0c207447a0bc82735c4dce6a79ff9c7e2852240a04b1ea9bb290d151e42
Size

304KB
MD5

071ed609b4974b7f8d90ce1437e3b140
SHA1

367187d6602caf5a2df9d32ab747e8b9a7902b21
SHA256

8be1c0c207447a0bc82735c4dce6a79ff9c7e2852240a04b1ea9bb290d151e42
SHA512

0d04d69cae7e2c2a360d9f4048b4eaefbd1f5bc566eaf571bd56bf1e7c2c5eb07581e838014a1dda613c92d2308f94bd4b230a8a0b5419806736f78ff0ae6af9
SSDEEP

6144:Uj0oBvM9Qj/xtydP+FhYOVokZF5/0Vvx1uJFSXT+c:/2jZtWAhYOVokZ//05B

Score

N/A

Malware Config

Signatures

Files

8be1c0c207447a0bc82735c4dce6a79ff9c7e2852240a04b1ea9bb290d151e42
.dll windows x86

287212799fd66c8921cddcfbf98ea1c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
EqualSid
IsValidSid
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
RegNotifyChangeKeyValue
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegCloseKey
RegEnumKeyExW
RegEnumKeyExA
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegDeleteKeyW
RegDeleteKeyA
RegSetValueExW
RegSetValueExA
RegDeleteValueW
RegDeleteValueA
RegCreateKeyExW
RegCreateKeyExA
RegOpenKeyExA

comctl32

ImageList_Create
ImageList_ReplaceIcon
PropertySheetW
PropertySheetA

comdlg32

GetSaveFileNameA
GetSaveFileNameW

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
ReleaseSemaphore
Sleep
CreateSemaphoreW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDriveStringsW
OutputDebugStringW
GetLastError
LoadLibraryExA
LoadLibraryExW
GetSystemDirectoryA
GetSystemDirectoryW
GetTempPathA
GetTempPathW
WritePrivateProfileStringA
WritePrivateProfileStringW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
OpenFileMappingA
OpenFileMappingW
CreateFileMappingA
CreateFileMappingW
GetPrivateProfileStringA
GetPrivateProfileStringW
SetErrorMode
CloseHandle
GetCurrentProcess
GetCurrentThread
GetTickCount
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
SetLastError
IsBadCodePtr
lstrcpynA
ExpandEnvironmentStringsA
GetFullPathNameA
GetDriveTypeA
SearchPathA
lstrlenA
OutputDebugStringA
GetModuleFileNameA
WaitForSingleObject
SetEvent
UnmapViewOfFile
FreeLibraryAndExitThread
WaitForMultipleObjects
MapViewOfFile
CreateThread
CreateEventW
DisableThreadLibraryCalls
GetVersionExA
DeleteCriticalSection
FormatMessageW
HeapDestroy
LeaveCriticalSection
HeapCompact
HeapSize
HeapReAlloc
HeapFree
InitializeCriticalSection
HeapAlloc
GetSystemInfo
GetModuleHandleA
HeapCreate
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetProcessHeap
ReleaseMutex
GetCurrentProcessId
OpenMutexA
CreateMutexA
GetVersionExW
lstrcpynW
IsBadReadPtr
GetCurrentThreadId
RaiseException
LocalFree

msvcrt

_adjust_fdiv
malloc
_initterm
free
_vsnwprintf
_ultow
wcsstr
_splitpath
_snprintf
_wtol
_ltow
_except_handler3
strncpy
wcstoul
_snwprintf
_wmakepath
wcsncat
sprintf
_wstat
_stat
_waccess
_access
_errno
swprintf
wcsncmp
_wcsnicmp
wcscpy
wcsrchr
wcscat
_wsplitpath
wcscmp
_wcsicmp
wcsncpy
wcslen
_winmajor

shell32

SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc

user32

GetSystemMetrics
GetWindowRect
GetParent
GetDlgCtrlID
GetDesktopWindow
MessageBoxA
GetWindowLongA
SendMessageW
SetWindowLongA
GetDlgItem
SetCursor
LoadCursorA
SendMessageA
EnableWindow
LoadIconA
MessageBoxW
MoveWindow
GetWindowTextA
GetWindowTextW
LoadStringA
LoadStringW
IsWindow
LoadCursorW
GetClientRect
LoadBitmapA
ChildWindowFromPoint
ScreenToClient
GetMessagePos
SetFocus

Exports

Exports

CloseODBCPerfData
CollectODBCPerfData
CursorLibLockDbc
CursorLibLockDesc
CursorLibLockStmt
CursorLibTransact
DllBidEntryPoint
GetODBCSharedData
LockHandle
MpHeapAlloc
MpHeapCompact
MpHeapCreate
MpHeapDestroy
MpHeapFree
MpHeapReAlloc
MpHeapSize
MpHeapValidate
ODBCGetTryWaitValue
ODBCInternalConnectW
ODBCQualifyFileDSNW
ODBCSetTryWaitValue
OpenODBCPerfData
PostComponentError
PostODBCComponentError
PostODBCError
SQLAllocConnect
SQLAllocEnv
SQLAllocHandle
SQLAllocHandleStd
SQLAllocStmt
SQLBindCol
SQLBindParam
SQLBindParameter
SQLBrowseConnect
SQLBrowseConnectA
SQLBrowseConnectW
SQLBulkOperations
SQLCancel
SQLCloseCursor
SQLColAttribute
SQLColAttributeA
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLDescribeCol
SQLDescribeColA
SQLDescribeColW
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLDriverConnectA
SQLDriverConnectW
SQLDrivers
SQLDriversA
SQLDriversW
SQLEndTran
SQLError
SQLErrorA
SQLErrorW
SQLExecDirect
SQLExecDirectA
SQLExecDirectW
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLForeignKeys
SQLForeignKeysA
SQLForeignKeysW
SQLFreeConnect
SQLFreeEnv
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttr
SQLGetConnectAttrA
SQLGetConnectAttrW
SQLGetConnectOption
SQLGetConnectOptionA
SQLGetConnectOptionW
SQLGetCursorName
SQLGetCursorNameA
SQLGetCursorNameW
SQLGetData
SQLGetDescField
SQLGetDescFieldA
SQLGetDescFieldW
SQLGetDescRec
SQLGetDescRecA
SQLGetDescRecW
SQLGetDiagField
SQLGetDiagFieldA
SQLGetDiagFieldW
SQLGetDiagRec
SQLGetDiagRecA
SQLGetDiagRecW
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfo
SQLGetInfoA
SQLGetInfoW
SQLGetStmtAttr
SQLGetStmtAttrA
SQLGetStmtAttrW
SQLGetStmtOption
SQLGetTypeInfo
SQLGetTypeInfoA
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSql
SQLNativeSqlA
SQLNativeSqlW
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrepareA
SQLPrepareW
SQLPrimaryKeys
SQLPrimaryKeysA
SQLPrimaryKeysW
SQLProcedureColumns
SQLProcedureColumnsA
SQLProcedureColumnsW
SQLProcedures
SQLProceduresA
SQLProceduresW
SQLPutData
SQLRowCount
SQLSetConnectAttr
SQLSetConnectAttrA
SQLSetConnectAttrW
SQLSetConnectOption
SQLSetConnectOptionA
SQLSetConnectOptionW
SQLSetCursorName
SQLSetCursorNameA
SQLSetCursorNameW
SQLSetDescField
SQLSetDescFieldA
SQLSetDescFieldW
SQLSetDescRec
SQLSetEnvAttr
SQLSetParam
SQLSetPos
SQLSetScrollOptions
SQLSetStmtAttr
SQLSetStmtAttrA
SQLSetStmtAttrW
SQLSetStmtOption
SQLSpecialColumns
SQLSpecialColumnsA
SQLSpecialColumnsW
SQLStatistics
SQLStatisticsA
SQLStatisticsW
SQLTablePrivileges
SQLTablePrivilegesA
SQLTablePrivilegesW
SQLTables
SQLTablesA
SQLTablesW
SQLTransact
SearchStatusCode
VFreeErrors
VRetrieveDriverErrorsRowCol
ValidateErrorQueue
g_hHeapMalloc

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

287212799fd66c8921cddcfbf98ea1c4

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

kernel32

msvcrt

shell32

user32

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 219KB

.data Size: 4KB - Virtual size: 3KB

.sdbid Size: 4KB - Virtual size: 944B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 220KB - Virtual size: 219KB

.data
Size: 4KB - Virtual size: 3KB

.sdbid
Size: 4KB - Virtual size: 944B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB

.rmnet
Size: 60KB - Virtual size: 60KB