32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693

Sharing

Copy URL Twitter E-mail

General

Target

32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693
Size

420KB
MD5

00b4f11a2ac8c671ffb38aa98238a35c
SHA1

865309f7f38fbc96b195b61c9b620fad9afbcc84
SHA256

32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693
SHA512

1228fb91397aae6bd9ba8c50ea8752443c398d3ce1b11ff4f5c8bd727e5870ba068872b808f8d9084e5230122e0bd3e40a9087892b148ed2bb1d9c536ada0a4f
SSDEEP

12288:utllTmnAdRLB4ENDV77rtIARcY3rHuJnm:utlQAJNx7VIiuJnm

Score

N/A

Malware Config

Signatures

Files

32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693
.exe windows x86

786d9cfb440a888704f471a9d974b2dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libmysql

mysql_close
mysql_init
mysql_query
mysql_insert_id
mysql_select_db
mysql_error
mysql_store_result
mysql_num_rows
mysql_fetch_row
mysql_real_connect
mysql_options
mysql_ping
mysql_free_result

kernel32

GetOEMCP
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
GetCPInfo
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetErrorMode
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
WritePrivateProfileStringA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
lstrcmpA
CreateEventA
GetCurrentThreadId
SetThreadPriority
CloseHandle
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersion
CompareStringA
MultiByteToWideChar
CompareStringW
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetTickCount
SetLastError
LocalFree
FormatMessageA
lstrcmpiA
SetConsoleCtrlHandler
lstrlenA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
InterlockedExchange
WaitForSingleObject
SuspendThread
ResumeThread
GetFileAttributesA
InitializeCriticalSection
EnterCriticalSection
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
GetLocalTime
GetCurrentProcess
SetProcessWorkingSetSize
SetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
RaiseException

user32

UnregisterClassA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessagePos
MapWindowPoints
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowPos
SetCursor
PostQuitMessage
DestroyWindow
IsWindow
GetDlgItem
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterClipboardFormatA
SetWindowsHookExA
CallNextHookEx
GetMessageTime
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
WaitMessage
PostMessageA
PeekMessageA
DispatchMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
SendMessageA
IsIconic
LoadIconA
EnableWindow
GetClientRect
CharUpperA
PostThreadMessageA
SetTimer
KillTimer
GetMenu

gdi32

DeleteDC
GetStockObject
RestoreDC
SaveDC
ExtTextOutA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
UnlockServiceDatabase
LockServiceDatabase
EnumServicesStatusA
DeleteService
CreateServiceA
QueryServiceConfigA
ControlService
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenSCManagerA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegFlushKey
RegDeleteKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
QueryServiceStatus
CloseServiceHandle
OpenServiceA

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoInitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

ws2_32

socket
select
gethostbyname
htonl
htons
inet_addr
bind
WSAGetLastError
accept
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
closesocket
WSACleanup
inet_ntoa
ntohs
WSAStartup

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

786d9cfb440a888704f471a9d974b2dc

Headers

File Characteristics

Imports

libmysql

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

ws2_32

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 112KB - Virtual size: 112KB