488b608d05f2241ea16494596b93329d98d84fe72e0224f47c4d64cb738660bb

Sharing

Copy URL Twitter E-mail

General

Target

488b608d05f2241ea16494596b93329d98d84fe72e0224f47c4d64cb738660bb
Size

2.3MB
MD5

36d14dbd52be27e9263820d09561cdd4
SHA1

547ec16697c945deb9cfaff25059a10cb37f6d26
SHA256

488b608d05f2241ea16494596b93329d98d84fe72e0224f47c4d64cb738660bb
SHA512

ec8d98cb41bab1c904c4b88800a675fc074c87217d7e98764284593f15fd84d1afdb02cea343c3612828e7e027d32cfc3fb9b947d12793b90e0a360c2cb7d8e2
SSDEEP

49152:ClIMUt7anD+blIIAnSYXIM7YqWhDLicClIFz0IJnvf3+rcDymbIdwg4IPDQ6gI8X:GUtOD+7AJaDLrvhG48wEDQ6kIyx

Score

N/A

Malware Config

Signatures

Files

488b608d05f2241ea16494596b93329d98d84fe72e0224f47c4d64cb738660bb
.exe windows x86

74422304f2f462d485afa096a2dc18f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sqlite3

sqlite3_sourceid

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3

kernel32

Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
WaitForSingleObjectEx
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
GetCommandLineA
LoadLibraryA
ExitProcess
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetVersion
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateMutexW
CreatePipe
CreateProcessA
CreateProcessW
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DosDateTimeToFileTime
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceExW
FindResourceW
FlushConsoleInputBuffer
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeResource
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileType
GetLastError
GetLocaleInfoW
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetOverlappedResult
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeExA
GetStringTypeExW
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetTempFileNameA
GetTempPathA
GetTimeZoneInformation
GetUserDefaultLangID
GetUserDefaultLCID
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
lstrcatA
lstrcmpA
lstrcpyA
lstrcpyW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileA
MulDiv
MultiByteToWideChar
OpenEventA
OpenEventW
OpenFileMappingA
OpenFileMappingW
OpenMutexA
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
QueryDosDeviceA
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
UnhandledExceptionFilter
ResetEvent
ResumeThread
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadExecutionState
SetUnhandledExceptionFilter
SizeofResource
SleepEx
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
RemoveDirectoryA

user32

CreateWindowExA
CreateWindowExW
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawStateA
DrawTextA
DrawTextW
EnableWindow
EnumChildWindows
EnumWindows
EqualRect
FillRect
FindWindowA
FindWindowExA
FindWindowW
FlashWindow
FrameRect
GetAsyncKeyState
GetCapture
GetClassInfoA
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetFocus
GetIconInfo
GetMessageA
GetParent
GetProcessWindowStation
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
IntersectRect
InvalidateRect
IsIconic
IsRectEmpty
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadImageW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MoveWindow
OffsetRect
PeekMessageA
PostMessageA
PostMessageW
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterClassExA
RegisterHotKey
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetParent
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnregisterClassA
UpdateWindow
WindowFromPoint
wsprintfA
wsprintfW
CreatePopupMenu
CopyRect
MessageBoxW
MessageBoxA
GetKeyboardType

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

OleInitialize
CoInitialize

shlwapi

PathFileExistsA

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lzmat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74422304f2f462d485afa096a2dc18f4

Headers

File Characteristics

Imports

sqlite3

msvcrt

kernel32

user32

advapi32

ole32

shlwapi

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 14.1MB

.tls Size: 5KB - Virtual size: 4KB

.lzmat Size: 1KB - Virtual size: 1KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 14.1MB

.tls
Size: 5KB - Virtual size: 4KB

.lzmat
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 9KB - Virtual size: 9KB