19da5b4bb874b64e823aa73c7d15a6ba10c00a4d2b139873efc2ae433faea158

Sharing

Copy URL Twitter E-mail

General

Target

19da5b4bb874b64e823aa73c7d15a6ba10c00a4d2b139873efc2ae433faea158
Size

165KB
MD5

98e6134eb491b117fb549664e90056f4
SHA1

6d5f7aa1005828f611d439eb196d66af6a055924
SHA256

19da5b4bb874b64e823aa73c7d15a6ba10c00a4d2b139873efc2ae433faea158
SHA512

e7d2e8e2dc6ae3a0b33ebbe7dce8a14f6649b0e287b9fad5d1cbb184dec6df2bb8567f68f88c28e061cb9a3893d424b0b73e54bee8902847fec149dc86888177
SSDEEP

3072:HY6h7Pm+pbqiNh4PLjYWthdc5w+eUDIETOKuKtH4Yx/bgNUZE0ooAAAtGnZIUQv:46de+pbqw0jY6dcS9ETfudY9MNQE0oNJ

Score

N/A

Malware Config

Signatures

Files

19da5b4bb874b64e823aa73c7d15a6ba10c00a4d2b139873efc2ae433faea158
.exe windows x86

52880e3c22716129aa7a06cde2838e7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmDestroyIMCC
ImmGetImeMenuItemsW
ImmInstallIMEW
ImmGetVirtualKey
ImmRegisterWordA
ImmAssociateContextEx
ImmGetCandidateListA
ImmGetGuideLineW
ImmPutImeMenuItemsIntoMappedFile
ImmGetCompositionStringA
ImmRegisterClient
ImmGetCompositionStringW
ImmSetActiveContext
ImmGetCandidateListW
ImmIMPGetIMEA
ImmIsUIMessageA
ImmLockClientImc
ImmReleaseContext
ImmEnumRegisterWordA
ImmIMPSetIMEA
ImmCreateIMCC
ImmConfigureIMEA
ImmRegisterWordW
ImmSetCompositionStringW
ImmGetIMCCSize
ImmGetDefaultIMEWnd
ImmSetCandidateWindow
ImmConfigureIMEW
ImmGetImeMenuItemsA
ImmGetImeInfoEx
ImmGetCandidateListCountA
ImmCreateContext
ImmUnlockClientImc
ImmGetGuideLineA
ImmGetHotKey
ImmGetProperty
ImmIMPSetIMEW
ImmIMPGetIMEW
ImmIsUIMessageW
ImmIMPQueryIMEW
ImmGetCompositionFontW
ImmGetIMCCLockCount
ImmSimulateHotKey
ImmUnlockImeDpi
ImmUnlockIMCC

kernel32

_lread
RtlZeroMemory
SetTapePosition
GetBinaryType
GlobalAlloc
ReplaceFileA
WriteConsoleOutputAttribute
GetCurrentThreadId
WriteTapemark
TzSpecificLocalTimeToSystemTime
WaitForSingleObjectEx
FindClose
DeactivateActCtx
CreateToolhelp32Snapshot
UTRegister
RtlFillMemory
GetSystemWow64DirectoryA
SetCurrentDirectoryA
WaitForDebugEvent
SetLocaleInfoA
VerifyConsoleIoHandle
OpenFileMappingW
GlobalSize
GetThreadLocale
GetLastError
ReleaseActCtx
SearchPathA
SetLastError
LoadResource
VirtualAlloc
FileTimeToDosDateTime
GetCurrentThread
SetConsoleInputExeNameW
FillConsoleOutputCharacterA
GetVolumePathNameA
GetEnvironmentStringsA
WaitNamedPipeA
GetProcessHeaps
SetConsoleKeyShortcuts
GlobalAddAtomA
GetBinaryTypeW
GetConsoleCP
GetFullPathNameA
HeapCreate
LoadLibraryA
CreateTimerQueue
SuspendThread
SetCalendarInfoW
RegisterConsoleVDM
OpenConsoleW

winipsec

GetTunnelFilter
EnumIPSecInterfaces
SPDApiBufferFree
EnumQMSAs
QueryIPSecStatistics
GetQMPolicyByID
DeleteTunnelFilter
CloseMMFilterHandle
EnumTunnelFilters
GetTransportFilter
AddTransportFilter
OpenTunnelFilterHandle
DeleteMMPolicy
CloseTunnelFilterHandle
OpenMMFilterHandle
SetMMPolicy
MatchTransportFilter
DeleteTransportFilter
EnumMMPolicies
SetMMAuthMethods
DeleteMMAuthMethods
AddMMPolicy
EnumMMAuthMethods
AddMMFilter
EnumTransportFilters

adsldpc

ADsAbandonSearch
SchemaGetPropertyInfo
LdapTypeToAdsTypeDNWithBinary
SchemaGetClassInfoByIndex
ADsGetNextRow
LdapcSetStickyServer
GetDefaultServer
LdapParseResult
BuildLDAPPathFromADsPath
UnMarshallLDAPToLDAPSynID
LdapCreatePageControl
ADSIGetNextRow
LdapSearchInitPage
ADsCreateAttributeDefinition
LdapParsePageControl
LdapAttributeFree
ReallocADsStr
ADsGetFirstRow
LdapGetSchemaObjectCount
AllocADsMem
IsGCNamespace
AllocADsStr
LdapSearchST
LdapMsgFree
?SetExclaimnationDisabler@CLexer@@QAEXH@Z
LdapCompareExt
intcmp
LdapModifyExtS
LdapSearchS
LdapOpenObject2
BuildADsPathFromLDAPPath2
SortAndRemoveDuplicateOIDs
LdapGetDn
LdapResult
ADSIDeleteDSObject
AdsTypeToLdapTypeCopyDNWithBinary

odbccu32

SQLFreeStmt
SQLGetDescField
SQLEndTran
SQLBindCol
SQLExecDirect
SQLTransact
SQLNumParams
SQLGetData
SQLSetStmtAttr
SQLGetDescRec
SQLSetPos
SQLGetStmtOption
SQLPrepare
SQLGetStmtAttr
SQLExecute
SQLRowCount
SQLBindParameter
SQLCloseCursor
SQLBulkOperations
SQLFreeHandle
SQLNativeSql
SQLMoreResults
SQLExtendedFetch
SQLGetInfo
SQLSetStmtOption
SQLSetConnectAttr
SQLSetDescField
SQLCancel
SQLParamOptions
SQLParamData
SQLSetScrollOptions
SQLFetchScroll
SQLPutData
SQLSetDescRec
SQLSetConnectOption
ReleaseCLStmtResources
SQLFetch

ntdll

_ultoa
isalnum
RtlMultiByteToUnicodeN
NtLockFile
RtlGUIDFromString
RtlUlonglongByteSwap
NtShutdownSystem
NtDeleteObjectAuditAlarm
RtlDeNormalizeProcessParams
ZwCreateDebugObject
LdrUnlockLoaderLock
RtlAddAuditAccessAce
KiUserCallbackDispatcher
ZwAlertResumeThread
NtUnloadKeyEx
ZwReplyWaitReceivePort
RtlQueueWorkItem
RtlLengthSecurityDescriptor
ZwQueryDefaultLocale
ZwAllocateLocallyUniqueId
NtCreateSemaphore
RtlConvertExclusiveToShared
RtlFindLongestRunClear
CsrCaptureMessageMultiUnicodeStringsInPlace
NtDeviceIoControlFile
ZwSetVolumeInformationFile
ZwMapViewOfSection
ZwCreatePagingFile
NtSetSecurityObject
RtlCreateActivationContext
ZwSetEvent
RtlIpv6AddressToStringA
RtlDecompressFragment
RtlAcquireResourceShared

cnvfat

IsConversionAvailable
ConvertFAT

Sections

.text
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52880e3c22716129aa7a06cde2838e7a

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

winipsec

adsldpc

odbccu32

ntdll

cnvfat

Sections

.text Size: 61KB - Virtual size: 64KB

.rdata Size: 85KB - Virtual size: 88KB

.data Size: 19KB - Virtual size: 180KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 61KB - Virtual size: 64KB

.rdata
Size: 85KB - Virtual size: 88KB

.data
Size: 19KB - Virtual size: 180KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB