0349801e90f9e4e9988394d833616b26c5ce0c76455b5d27d4f69b61bb530fb3

General

Target

0349801e90f9e4e9988394d833616b26c5ce0c76455b5d27d4f69b61bb530fb3
Size

33KB
MD5

82ca86aac2b822bd99dd5809628a4270
SHA1

a07be257cf9a956bb459f1f03cbb1aff36e39718
SHA256

0349801e90f9e4e9988394d833616b26c5ce0c76455b5d27d4f69b61bb530fb3
SHA512

5e50a7fd7124682b2f84fc3a4a7654fbbe85311e8850864d6cda864b2af5209e9dca102f6ef0ddd1c99e26aabc59b016faef34be73b12fd6959c48235ff82da6
SSDEEP

768:ZwnjflK2kU3ZQGdg1Iu5jzjIvxuliMDcAuDE3sRIbQS1VC5:ZGlk2hq1T5w4iSafS1

Score

N/A

Malware Config

Signatures

Files

0349801e90f9e4e9988394d833616b26c5ce0c76455b5d27d4f69b61bb530fb3
.exe windows x86

f81347ab08b812a270c45530e1ff6c0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sqlunirl

_DeleteFile@4

autowiz

DoAutoPilotWithTracefile
DoAutoPilotWizard

pfutil80

??1CSharedMemory@@UAE@XZ
??0CSharedMemory@@QAE@IPBG@Z
?MeFirst@CSharedMemory@@QAEHXZ
?Lock@CSharedMemory@@QAEHXZ
?Unlock@CSharedMemory@@QAEHXZ

msvcr71

__CxxFrameHandler
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
wcscpy
wcschr
__security_error_handler
_except_handler3
memset
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
?terminate@@YAXXZ

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetModuleHandleA
ExitProcess

Exports

Exports

??0CSharedMemory@@QAE@ABV0@@Z
??4CSharedMemory@@QAEAAV0@ABV0@@Z
??_7CSharedMemory@@6B@

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qvzldsv
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f81347ab08b812a270c45530e1ff6c0f

Headers

File Characteristics

Imports

sqlunirl

autowiz

pfutil80

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 80B

.rsrc Size: 26KB - Virtual size: 26KB

qvzldsv Size: - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 80B

.rsrc
Size: 26KB - Virtual size: 26KB

qvzldsv
Size: - Virtual size: 4KB