bb3994f70256bf49acb7f66299bed6cad7b77650bf84b67cb12a24af0110cf4d

Sharing

Copy URL

Twitter E-mail

General

Target

bb3994f70256bf49acb7f66299bed6cad7b77650bf84b67cb12a24af0110cf4d
Size

55KB
MD5

2c99fc188824cdf7f34c0aff8f4866d9
SHA1

c8dbbba05355bd9804cbb33b0bfd9d0486f4e2db
SHA256

bb3994f70256bf49acb7f66299bed6cad7b77650bf84b67cb12a24af0110cf4d
SHA512

40e2ebbcaf8b5b305bf6182bcddb388dd6a353ad074dfd26db7fe056bf74ffa2d9ebfd1f938c1fd4264d6119dc900a22adec7df1959759fa87c3cd27dcbf9d5c
SSDEEP

1536:Iw8gjZXybKIZQ6TJs9nwS+2eYczafAfFwtGC/aQs:T8es+IZQ6T8LRSza4saQs

Score

N/A

Malware Config

Signatures

Files

bb3994f70256bf49acb7f66299bed6cad7b77650bf84b67cb12a24af0110cf4d
.dll windows x86

ec786216bcc8e4c2f8d2450e4965e639

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
SetEvent
GetConsoleScreenBufferInfo
MapViewOfFile
GetProcAddress
FreeEnvironmentStringsW
GetCurrentDirectoryA
CloseHandle
TlsAlloc
InterlockedDecrement
GetSystemInfo
FileTimeToLocalFileTime
SetLastError
WaitForSingleObject
QueryPerformanceCounter
OpenFileMappingA
GetFileAttributesExA

dpnhrand

Log
MIRR
PutMemEvent
GetOwner4
MidStmtBstr
DateDiff
IndexLoad
GetMemNewObj
SetContextWorkerThread
ForInit
MonthName
FormatPercent
ExitEachAry
Rgb
RsetFixstr
TstEq
StrR4
TstLt
Or
Div
Aryg
BstrFromAnsi
LateMemSt
CurrentDir
RecAssign
CVErrFrom
CastObj
SetUnk
CreateObject2
GetHourOfDay
LateIdNamedCallSt
CurrentDirBstr
DestroyContext
R8IntI4
End
TextLike
ErrI4
LateIdNamedCall
PV
SetMemObj
GetMemEvent
GetMonthOfYear
R8Sgn
RecUniToAnsi
TextTstGt
LateIdStAd
AppActivate
GetDayOfMonth
LeftBstr
GosubReturn
R8ForNextCheck
HresultCheckNonvirt
TextCmpLe
SetAddref
Mul
ErrObj
Put3
R8FixI2

ntdll

ZwSetInformationThread
RtlFreeUnicodeString
NtOpenSection
NtWriteFile
ZwCreateSection

user32

ReleaseCapture
MessageBeep
InSendMessage
DrawMenuBar
IsWindowUnicode
RedrawWindow
SetTimer
SetScrollPos
SetCursor
GetMessageTime
GetClipboardOwner
IsWindowEnabled
DrawFocusRect
FindWindowW
CharUpperBuffW
EqualRect
VkKeyScanW
PeekMessageA
OpenInputDesktop
SendMessageTimeoutW

Exports

Exports

CreateProcessrotify
CreateDatabaseWithStreaming
GetVersion
GetColumnInfo
BeginSession
OpenTempTable
SetTableSequential
EndExternalBackup
DeleteTable
EnumerateColumns
DetachDatabase
SetColumnDefaultValue
CreateTableColumnIndex2
GetRecordPosition
SetIndexRange
Idle
CreateIndex2
GetDatabaseFileInfo
Update
OpenDatabase
IndexRecordCount
BeginTransaction2
OSSnapshotFreeze
Init2
OSSnapshotPrepare
StopServiceInstance
GetAttachInfo
GetSystemParameter
GotoBookmark
GetLogInfo
GetLS
GetLock
CloseFileInstance
SetSystemParameter
DeleteIndex
OpenTempTable3
Term2
FreeBuffer
GetInstanceInfo
CloseDatabase
RetrieveTaggedColumnList
StopService
Restore2
DupSession
EndExternalBackupInstance2
DupCursor
RestoreInstance
EndSession
RetrieveKey
GetCurrentIndex
CommitTransaction
DetachDatabase2
PrepareUpdate
Restore
EnableMultiInstance
SetCurrentIndex2
TruncateLog
SetDatabaseSize
AttachDatabase2
RenameColumn
IntersectIndexes
ReadFile
RetrieveColumn
UpgradeDatabase

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec786216bcc8e4c2f8d2450e4965e639

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

dpnhrand

ntdll

user32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 44KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 44KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB