ae7f419e0093fd2d4892ea6920aaa2c12c95cede9c97cb0a1f096496d4ff93ea

General

Target

ae7f419e0093fd2d4892ea6920aaa2c12c95cede9c97cb0a1f096496d4ff93ea
Size

35KB
MD5

62c57691573b71085371bb8b41a87397
SHA1

084b93eb97bec19f2defe4cdbf79bf4548dca41e
SHA256

ae7f419e0093fd2d4892ea6920aaa2c12c95cede9c97cb0a1f096496d4ff93ea
SHA512

5e0ce0111d2fe316e992ef7bf02a44f6aa6c3930382caa972cc68d40a39e564bc1f5a1bb05d3da83c8f49a4235b07a11082022cde7dbf23f84d9fdb468075794
SSDEEP

192:GOJNn5/4MWIdnmlVDm77OFhj5c4T6OCWu6TxAE/yWI00zpCFmYWZvqbZ:JNG8UjndcFOCWuUAE6T00NCYY5bZ

Score

N/A

Malware Config

Signatures

Files

ae7f419e0093fd2d4892ea6920aaa2c12c95cede9c97cb0a1f096496d4ff93ea
.exe windows x86

a383ca6006a7f9689288612580a93401

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

rasman

RasGetDialParams

odbc32

SQLDescribeColW
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLDriverConnectA
SQLDriverConnectW
SQLDrivers
SQLDriversA
SQLDriversW
SQLEndTran
SQLError
SQLErrorA
SQLErrorW
SQLExecDirect
SQLExecDirectA
SQLExecDirectW
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLForeignKeys
SQLForeignKeysA
SQLForeignKeysW
SQLFreeConnect
SQLFreeEnv
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttr
SQLGetConnectAttrA
SQLGetConnectAttrW
SQLGetConnectOption

kernel32

MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA

pdh

PdhAdd009CounterA
PdhAdd009CounterW
PdhAddCounterA
PdhAddCounterW

adsldpc

ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn

cmutil

CmStrCpyAllocW

mtxclu

MtxCluIsClusterPresent

samlib

SamAddMemberToAlias

Sections

.text
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a383ca6006a7f9689288612580a93401

Headers

File Characteristics

Imports

rasman

odbc32

kernel32

pdh

adsldpc

cmutil

mtxclu

samlib

Sections

.text Size: 4KB - Virtual size: 24KB

DATA Size: 7KB - Virtual size: 80KB

.rsrc Size: 22KB - Virtual size: 24KB

Size: 512B - Virtual size: 496B

.text
Size: 4KB - Virtual size: 24KB

DATA
Size: 7KB - Virtual size: 80KB

.rsrc
Size: 22KB - Virtual size: 24KB