4a0b0c6e4d203a2087f6fe015a2150237bcbe8d710d18376cb918c3be156e0f6

Sharing

Copy URL Twitter E-mail

General

Target

4a0b0c6e4d203a2087f6fe015a2150237bcbe8d710d18376cb918c3be156e0f6
Size

89KB
MD5

d1b5171c37c301b1853399f84cef31a2
SHA1

36cb59789c7dbc1251ff3f0d192b1f4c4a5804eb
SHA256

4a0b0c6e4d203a2087f6fe015a2150237bcbe8d710d18376cb918c3be156e0f6
SHA512

b5df084c1d4c974ede3de96c9b5fa34f16148a506894470534afb45c7f1fc9e36435a2a357f30ef68047641ba7592b5914810866e90204d9c015d87205199684
SSDEEP

1536:s0h3kuBEpLOg9ajbIU+NeRj1dAFoLx6gXS9vcPGSXD22Of8III7YRB:sc9cK2ajbIU+NeprCoLYLvqZOUIII7YR

Score

N/A

Malware Config

Signatures

Files

4a0b0c6e4d203a2087f6fe015a2150237bcbe8d710d18376cb918c3be156e0f6
.exe windows x86

330bc2efc342c93069f03a58d996decc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

GetClusterResourceKey
FailClusterResource
SetClusterGroupName
RegisterClusterNotify
GetClusterResourceTypeKey
ClusterNodeOpenEnum
ClusterGroupGetEnumCount
GetClusterFromGroup
ClusterResourceTypeCloseEnum
ResumeClusterNode
OpenClusterNode
ClusterNodeEnum
OpenClusterNetInterface
ClusterResourceGetEnumCount
SetClusterNetworkPriorityOrder
DeleteClusterGroup
ChangeClusterResourceGroup
GetClusterNetInterface
OpenClusterGroup
ClusterRegSetValue
ClusterRegOpenKey
GetClusterNetworkKey
CreateClusterResourceType
GetClusterNetInterfaceKey
GetClusterNetInterfaceState

ntdll

RtlSecondsSince1970ToTime
LdrQueryProcessModuleInformation
strstr
RtlSetHeapInformation
RtlCreateEnvironment
ZwQueryVirtualMemory
NtTranslateFilePath
RtlDebugPrintTimes
RtlGetNativeSystemInformation
NtSetSystemTime
NtTerminateJobObject
NtCloseObjectAuditAlarm
_allshr
RtlEqualString
NtIsSystemResumeAutomatic
ZwSetSystemTime
NtQueryInformationPort
RtlUpcaseUnicodeToCustomCPN
RtlInitializeAtomPackage
RtlUnwind
RtlNumberOfClearBits
RtlFirstFreeAce

kernel32

LocalAlloc
FindVolumeClose
LoadResource
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
SetThreadPriority
IsBadHugeReadPtr
GetVolumePathNameA
GetCurrentThreadId
GetLastError
WriteConsoleOutputAttribute
EnumDateFormatsExW
DeleteFileA
DuplicateConsoleHandle
LockFile
GetProfileIntA
GetConsoleCommandHistoryW
CreateJobObjectW
SetHandleContext
SetFileShortNameA
LoadLibraryA
EnumCalendarInfoExW
Toolhelp32ReadProcessMemory
lstrcpy
_llseek
GetBinaryTypeA
GetCurrentProcessId
GetTickCount
BaseFlushAppcompatCache
HeapSummary
HeapCreate
CreateMailslotA
GetThreadPriorityBoost

ddraw

DSoundHelp
AcquireDDThreadLock
DirectDrawCreateEx
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalUnlock
DirectDrawCreate
DirectDrawEnumerateExA
GetSurfaceFromDC
DllGetClassObject
RegisterSpecialCase
DDGetAttachedSurfaceLcl
DirectDrawCreateClipper
GetOLEThunkData
DllCanUnloadNow
DirectDrawEnumerateA
GetDDSurfaceLocal
ReleaseDDThreadLock
DirectDrawEnumerateW
DDInternalLock
DirectDrawEnumerateExW

msvcp60

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
?setstate@ios_base@std@@QAEXH_N@Z
?narrow@?$ctype@G@std@@QBEDGD@Z
?overflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
?lt@?$char_traits@D@std@@SA_NABD0@Z
?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??_F?$numpunct@G@std@@QAEXXZ
??_F?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

sqlunirl

_GetICMProfile_@12
_CreateWindowEx@48
_FatalAppExit_@8
_SetWindowText@8
_GetFileVersionInfo_@16
_EnumDependentServices_@24
_GetServiceDisplayName_@16
_ResetDC_@8
_lstrcat_@8
_ReportEvent_@36
_GetBinaryType_@8
_CharUpper@4
_CreateDirectoryEx_@12
_NDdeShareSetInfo_@24
_CreateWaitableTimer_@12
_OemToCharBuff_@12
_DlgDirListComboBox_@20
_CreateFile@28
_ShellAbout_@16

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

330bc2efc342c93069f03a58d996decc

Headers

DLL Characteristics

File Characteristics

Imports

clusapi

ntdll

kernel32

ddraw

msvcp60

sqlunirl

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 17KB - Virtual size: 19KB

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 384B

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 17KB - Virtual size: 19KB

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 384B