a692ac9d7cc3917f1fbfaf35bf50aa235c9c0091693a9278a1468e3fab4e8a57

Sharing

Copy URL Twitter E-mail

General

Target

a692ac9d7cc3917f1fbfaf35bf50aa235c9c0091693a9278a1468e3fab4e8a57
Size

812KB
MD5

6e46fde1dc4e03a06296a6f5fa0c40c0
SHA1

0dab7abab2ec5c1aa0e26e183f97107f0876ede0
SHA256

a692ac9d7cc3917f1fbfaf35bf50aa235c9c0091693a9278a1468e3fab4e8a57
SHA512

212a22d856bc6125fceb3f0cc2c20f52abed6d7b8787d0d1f5e8889bac10c2a2b5a1fc74d8bf834f413cc05756b8bf047c9a989c010a9362617a1bb77274932a
SSDEEP

12288:+k3+2H6osxXUCIv2oiflvNy0QEIMC+FWKr1+GmsMPPqdfV1c3y8f5Tp+88a:mWsy+oifLIaAKr1+lRytTj05TE8

Score

N/A

Malware Config

Signatures

Files

a692ac9d7cc3917f1fbfaf35bf50aa235c9c0091693a9278a1468e3fab4e8a57
.exe windows x86

fc8a24a8b7db8c12d59ef0ada5ea29c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawEnumerateA
DDInternalUnlock
RegisterSpecialCase
GetOLEThunkData
DirectDrawCreateEx
DDInternalLock
DirectDrawCreate
DDGetAttachedSurfaceLcl
D3DParseUnknownCommand
GetDDSurfaceLocal
ReleaseDDThreadLock
DirectDrawEnumerateExA
CompleteCreateSysmemSurface
DirectDrawCreateClipper
DSoundHelp
GetSurfaceFromDC
AcquireDDThreadLock
DirectDrawEnumerateExW
DirectDrawEnumerateW

kernel32

ReadConsoleInputA
TransactNamedPipe
GetDiskFreeSpaceA
QueryDepthSList
GetConsoleMode
UnlockFileEx
WritePrivateProfileStringW
GetStartupInfoW
GetModuleHandleA
GetConsoleCommandHistoryLengthA
GetTickCount
FindNextChangeNotification
GetModuleHandleW
GetLogicalDriveStringsW
SetLocaleInfoA
VirtualAlloc
GetFileTime
EnumSystemLocalesW
SetEvent
LoadLibraryA
lstrlenW
VirtualProtectEx
LocalSize
RaiseException
WriteConsoleOutputCharacterW
TlsGetValue
GetStartupInfoA
GetVolumeNameForVolumeMountPointA
GetLogicalDrives
DuplicateConsoleHandle
GetModuleFileNameA
_lclose
GetBinaryTypeA
GlobalWire
EnumResourceTypesA

odbctrac

TraceSQLDescribeCol
TraceSQLGetDescFieldW
TraceSQLPrepareW
TraceSQLColAttributes
TraceSQLBindCol
FireVSDebugEvent
TraceVersion
TraceSQLGetConnectAttrW
TraceSQLMoreResults
TraceSQLSetEnvAttr
TraceSQLSetConnectAttr
TraceSQLFetchScroll
TraceSQLDataSourcesW
TraceSQLFreeHandle
TraceSQLProcedures
TraceSQLSetCursorName
TraceSQLBulkOperations
TraceSQLGetData
TraceSQLDescribeColW
TraceSQLGetEnvAttr
TraceSQLBrowseConnect
TraceSQLSetDescRec
TraceSQLGetFunctions
TraceSQLSpecialColumnsW
TraceSQLConnect
TraceSQLGetInfo
TraceSQLSetPos
TraceSQLSetStmtAttrW
TraceSQLProcedureColumns

secur32

GetComputerObjectNameW
DeleteSecurityPackageW
DecryptMessage
EnumerateSecurityPackagesW
AddSecurityPackageW
UnsealMessage
SaslGetProfilePackageA
QueryContextAttributesA
LsaDeregisterLogonProcess
AcceptSecurityContext
InitializeSecurityContextA
InitializeSecurityContextW
SaslGetProfilePackageW
SaslIdentifyPackageA
LsaLookupAuthenticationPackage
GetSecurityUserInfo
DeleteSecurityContext
EncryptMessage
DeleteSecurityPackageA
LsaFreeReturnBuffer
InitSecurityInterfaceW
RevertSecurityContext
ImportSecurityContextA
QuerySecurityPackageInfoW
SetContextAttributesW
SaslEnumerateProfilesA

raschap

RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo

diskcopy

DiskCopyRunDllW
DiskCopyRunDll

Sections

.text
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc8a24a8b7db8c12d59ef0ada5ea29c4

Headers

DLL Characteristics

File Characteristics

Imports

ddraw

kernel32

odbctrac

secur32

raschap

diskcopy

Sections

.text Size: 365KB - Virtual size: 365KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 192KB - Virtual size: 1.6MB

.rsrc Size: 155KB - Virtual size: 155KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 365KB - Virtual size: 365KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 192KB - Virtual size: 1.6MB

.rsrc
Size: 155KB - Virtual size: 155KB

.reloc
Size: 1KB - Virtual size: 1KB