39dad15a6a60c71bb03437d66a503e1b15b20765f7befe086ba842f3c723a383

General

Target

39dad15a6a60c71bb03437d66a503e1b15b20765f7befe086ba842f3c723a383
Size

539KB
MD5

f940a191f387d66d93c1358f4a15227a
SHA1

818773b0b44b987318a11bbc5ca0711540929a43
SHA256

39dad15a6a60c71bb03437d66a503e1b15b20765f7befe086ba842f3c723a383
SHA512

ea4cfd9f1853cf42784bb16db8d83db09051fa2a616e50ebe237fb05e6824dd117abb41e52e3e59da23e4563ea464306ef60e273c4693d679d1b2836bbec46b1
SSDEEP

12288:ed/OyaOMpiU2G+Dt52xBW1W/gJ9xBiznIhMVQXp0CBG/Jsf:0/OjVpiFG+h52xkWIrxBizIiJsf

Score

N/A

Malware Config

Signatures

Files

39dad15a6a60c71bb03437d66a503e1b15b20765f7befe086ba842f3c723a383
.exe windows x86

49d007634ff19b49b8f0f46bf2a566cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
ShowWindowAsync
GetClientRect
SetWindowPlacement
AdjustWindowRect
GetWindowPlacement
IsWindow
CloseWindow
DeferWindowPos
GetTopWindow

gdi32

EndPage
BitBlt
CloseEnhMetaFile
GetBkMode
GetAspectRatioFilterEx
FillRgn
Escape
EqualRgn
CreateFontA
AbortDoc
CreateCompatibleDC

advapi32

RegQueryValueA
ClearEventLogW
RegQueryInfoKeyA
RegisterEventSourceA
OpenEventLogA
RegSetValueExA
PrivilegeCheck
RegOpenKeyA
RegCreateKeyA

shlwapi

PathRemoveFileSpecA
SHQueryValueExA
StrRStrIA
PathIsSameRootW
PathRenameExtensionW

kernel32

GetPrivateProfileStringA
GetPrivateProfileStructA
GetModuleHandleA
GetProcAddress
VirtualAllocEx
GetStartupInfoA

wsnmp32

ord301
ord204
ord906
ord602
ord206
ord101
ord605
ord201
ord600
ord102
ord203
ord200
ord107

odbc32

ord60

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49d007634ff19b49b8f0f46bf2a566cb

Headers

File Characteristics

Imports

user32

gdi32

advapi32

shlwapi

kernel32

wsnmp32

odbc32

msvcrt

Sections

.text Size: 503KB - Virtual size: 502KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 298KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 503KB - Virtual size: 502KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 298KB

.rsrc
Size: 32KB - Virtual size: 32KB