6951a11f32f409745927a0146d35f8dbdcca7f5f391833b2f2d731242e221514

Sharing

Copy URL

Twitter E-mail

General

Target

6951a11f32f409745927a0146d35f8dbdcca7f5f391833b2f2d731242e221514
Size

39KB
MD5

f7f11478258391cc18280f698fc2075c
SHA1

182a5d423af496c0a4035df752c8b0e91793bb85
SHA256

6951a11f32f409745927a0146d35f8dbdcca7f5f391833b2f2d731242e221514
SHA512

39ff932d585b8ec54d10f40f27473016035e90904a2db3f73d4ef75b24fa17c376fb476228f72b60c0bd681aeb682bb94ee0ef6221f70ade9ea3c540025906e4
SSDEEP

768:/LGPlbNBT77UL4Z4KWn7DvEKsR0O24mWi4KVGGphbKVhf1JFJr:4lbnT7IkOXDMK024fi4XGphbYf1Lt

Score

N/A

Malware Config

Signatures

Files

6951a11f32f409745927a0146d35f8dbdcca7f5f391833b2f2d731242e221514
.exe windows x86

487b83ac4bb83a32f2cdbe6d4cf86310

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

snmpapi

SnmpUtilOidCmp
SnmpSvcAddrToSocket
SnmpSvcGetEnterpriseOID
SnmpSvcGetUptimeFromTime
SnmpUtilMemFree
SnmpUtilVarBindCpy
SnmpUtilOidAppend
SnmpSvcSetLogType
SnmpSvcSetLogLevel
SnmpSvcGetUptime

sqlunirl

_RegisterClipboardFormat_@4
_DlgDirSelectComboBoxEx_@16
_GetWindowTextLength@4
_OemToCharBuff_@12
_SHGetPathFromIDList_@8
_DlgDirList_@20
__hwrite_@12
_GetLogicalDriveStrings_@8
_DefWindowProc@16
_LookupAccountSid_@28
_SetProp@12
_ExtractIcon_@12
_NDdeGetTrustedShare_@20
_IsCharUpper_@4
_LoadLibrary@4

kernel32

EnumLanguageGroupLocalesW
GetLocaleInfoA
CompareStringA
SetConsoleFont
FoldStringA
_lopen
GetProcessAffinityMask
SetHandleInformation
LoadLibraryW
GetConsoleFontSize
GetCurrencyFormatW
GetProfileIntW
CreateConsoleScreenBuffer
GetTempFileNameA
FindFirstFileA
SetConsoleMenuClose
GetAtomNameW
OpenSemaphoreW
GetCurrentThread
EnumResourceNamesW
GetCurrentConsoleFont
SetVolumeMountPointW
GetModuleHandleW
GetCompressedFileSizeA
GetConsoleAliasExesW
GetLogicalDriveStringsW

sqlsrv32

SQLExtendedFetch
SQLFreeHandle
WizDSNDlgProc
BCP_setcolfmt
SQLGetFunctions
SQLGetConnectAttrW
SQLSpecialColumnsW
SQLMoreResults
SQLSetPos
SQLProceduresW
SQLExecute
SQLGetTypeInfoW

rtm

RtmLookupIPDestination
RtmReleaseDestInfo
RtmCreateRouteList
RtmGetEntityInfo
EnumOverTable
RtmGetNetworkCount
RtmReleaseChangedDests
RtmGetEnumNextHops
RtmReleaseEntityInfo
RtmGetNextHopInfo
RtmDeleteRouteList
MgmGroupEnumerationGetNext
MgmTakeInterfaceOwnership
RtmIsBestRoute
CreateTable
MgmGetFirstMfeStats
RtmFindNextHop
RtmReadInstanceConfig
RtmReleaseNextHopInfo
MgmGetNextMfe
RtmGetRouteInfo

dhcpsapi

DhcpGetVersion
DhcpAuditLogSetParams
DhcpGetThreadOptions
DhcpGetSuperScopeInfoV4
DhcpEnumClasses
DhcpDeleteServer
DhcpGetAllOptionValues
DhcpGetServerBindingInfo
DhcpAddSubnetElementV4
DhcpSetSubnetInfo
DhcpSetClientInfo
DhcpRemoveOptionValueV5
DhcpDeleteClientInfo
DhcpSetOptionValuesV5
DhcpSetOptionValueV5
DhcpGetOptionInfoV5
DhcpEnumOptionValuesV5
DhcpEnumMScopeElements
DhcpGetOptionValueV5
DhcpRpcFreeMemory
DhcpCreateClass
DhcpEnumSubnetElementsV4
DhcpGetAllOptions
DhcpEnumMScopeClients
DhcpGetSubnetInfo
DhcpEnumSubnets
DhcpServerRestoreDatabase
DhcpAuditLogGetParams
DhcpGetMScopeInfo
DhcpDeleteClass

crypt32

CryptInstallOIDFunctionAddress
CryptEnumKeyIdentifierProperties
I_CryptGetAsn1Decoder
CertDeleteCTLFromStore
CertFindChainInStore
CryptHashMessage
CryptFormatObject
CryptMsgCountersignEncoded
CryptExportPKCS8
CertCreateCertificateContext
CertAddEncodedCertificateToStore
CertCreateCertificateChainEngine
CryptMsgClose

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

487b83ac4bb83a32f2cdbe6d4cf86310

Headers

DLL Characteristics

File Characteristics

Imports

snmpapi

sqlunirl

kernel32

sqlsrv32

rtm

dhcpsapi

crypt32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 284B

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 284B

.rsrc
Size: 5KB - Virtual size: 4KB