e8abfe75091b38d1c65f22f5f0d91dcae9267237a1825de685d9e2fa467df4fa

Sharing

Copy URL Twitter E-mail

General

Target

e8abfe75091b38d1c65f22f5f0d91dcae9267237a1825de685d9e2fa467df4fa
Size

164KB
MD5

59672455509eee29c93775dbf08fa6fa
SHA1

b0a3444031017a63c6d593b2db4ba8808c5a100b
SHA256

e8abfe75091b38d1c65f22f5f0d91dcae9267237a1825de685d9e2fa467df4fa
SHA512

ec3cbb6d969b2b24c709bcaaa985b563c239ea865578ca19fd718dc19e5541e340cefb21bf31f922f8fcdf946aac90bc54bbe9bed35213605f9ea4d52505c6d3
SSDEEP

1536:8/ceDKbl0PwlXrKnvIqT8U5MrtDRGoethZ5AZdruNvc1rUZsj2s3k1MkSbQiFCfD:Wc/Wnv/5kD4hnvc1tk1MiH7iFEvu

Score

N/A

Malware Config

Signatures

Files

e8abfe75091b38d1c65f22f5f0d91dcae9267237a1825de685d9e2fa467df4fa
.dll windows x86

ceddaa60de44e811575d1fb0298ed438

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

SetFilePointer
GetFileType
GetCurrentThreadId
SetConsoleCtrlHandler
GetVersionExA
ExitProcess
LeaveCriticalSection
GetEnvironmentStrings
GetLastError
IsDBCSLeadByte
VirtualQuery
TlsAlloc
GetLocalTime
CloseHandle
TlsGetValue
RaiseException
GetStartupInfoA
GetFileAttributesA
CreateFileA
GetCommandLineA
GetProcAddress
InitializeCriticalSection
UnhandledExceptionFilter
WriteFile
VirtualAlloc
TlsFree
GetVersion
GetModuleHandleA
FreeEnvironmentStringsA
EnterCriticalSection
VirtualFree
TlsSetValue
SetHandleCount
RtlUnwind
GlobalMemoryStatus
GetStdHandle
GetModuleFileNameA

idapi32

DbiQExecDirect
DbiFreeBlob
DbiSetRange
DbiTruncateBlob
DbiPutBlob
DbiDeleteRecord
DbiSetToBegin
DbiGetBlob
DbiGetBlobSize
DbiModifyRecord
OsSeek
OsWrite
DbiOpenBlob
OsClose
OsUnlink
OsFileLength
OsReadFromPos
OsWriteExactToPos
OsOpenR
OsNmValidateFldName
OsClearError
LsDateDecode
LsTimeDecode
ImltCreateTable
VtGenCreateObj
OsCreate
_OsFree
DbiOpenFieldTypesList
DbiInsertRecord
DbiCloseCursor
DbiOpenTable
_OsRealloc
_OsCalloc
DbiGetDatabaseDesc
_OsMalloc
DbiGetLdObj
DbiForceReread
DbiGetRecord
DbiGetRecordForKey
DbiDeleteTable
DbiRelTableLock
DbiGetProp
DbiAnsiToNative
DbiCreateTable
DbiNativeToAnsi
DbiSetProp
SysGetActiveClient
OsNmBldFName
DbiAddAlias
DbiAddRepository
DbiDeleteRepository
DbiGetRepositoryInfo
GetWorldFlags
SvAtoI
DbiInitRecord
DbiAcqTableLock
DbiGetPriorRecord
DbiGetFieldDescs
SysGetActiveSes
_SvStrPrintF
DbiCloneCursor
OsLoadString
OsSaveErrorByLang
DbiPutField
DbiCreateInMemTable
DbiRegisterCursor
DbiGetLdNameFromDb
DbiGetField
DbiEndTran
DbiBeginTran
DbiQAlloc
DbiOpenVchkList
DbiGetNextRecord
ExecCallBack
GetCallBack
DbiQFree
RegCallBack
OsLdIsDigit
DbiQSetParams
DbiOpenTableList
OsLdIsAlpha
DbiQExec
DbiCloseDatabase
DbiSetToEnd
DbiQPrepare
DbiGetCursorProps
DbiOpenDatabase
OsLdUnloadObj
DbiGetDirectory
OsLdLoadBySymbName
OsLdGetDefaultObj

user32

OemToCharA
MessageBoxA
EnumThreadWindows
CharToOemA

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
DRepCursorClose
DRepObjCursorOpen
DRepRelCursorOpen
DbiDRAdd
DbiDRAddAttr
DbiDRAnalyzeChange
DbiDRClose
DbiDRCreate
DbiDRCreateEnumAttrDomain
DbiDRCreateObjectType
DbiDRCreateRelationType
DbiDRDelete
DbiDRDeleteEnumAttrDomain
DbiDRDeleteObjectType
DbiDRDeleteRelationType
DbiDRDrop
DbiDRDropAttr
DbiDRExportToFile
DbiDRGetAttrDescs
DbiDRGetDesc
DbiDRGetEnumAttrDomain
DbiDRGetObjID
DbiDRGetObjTypeInfo
DbiDRGetRelTypeInfo
DbiDRGetRelatedObject
DbiDRImportFromFile
DbiDRLoadDBObject
DbiDRModifyEnumAttrDomain
DbiDROpen
DbiDROpenAttrTypeList
DbiDROpenObjSet
DbiDROpenObjectTypeList
DbiDROpenRelSet
DbiDROpenRelTypeList
DbiDRSetToObjID
DbiDRSetToObjName
OsLdMBRisCJKBlank
OsLdMBRisCJKKana
OsLdMBRisKana
OsLdMBRisLead
OsLdMBRisTrail
RepDrvInit
WEP
__DebuggerHookData

Sections

CODE
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 26KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ceddaa60de44e811575d1fb0298ed438

Headers

File Characteristics

Imports

kernel32

idapi32

user32

Exports

Exports

Sections

CODE Size: 126KB - Virtual size: 128KB

DATA Size: 26KB - Virtual size: 40KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 1KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

CODE
Size: 126KB - Virtual size: 128KB

DATA
Size: 26KB - Virtual size: 40KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 1KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB