b0814f2f82381f8b6dacedfa7b05c6596844cdc8e0cf15fc9b430bde68e8800c

General

Target

b0814f2f82381f8b6dacedfa7b05c6596844cdc8e0cf15fc9b430bde68e8800c
Size

219KB
MD5

d2643d5278999bd6adc0713f37befaa0
SHA1

acf9ad537eff5ba9385d8db04c35206ff222cca5
SHA256

b0814f2f82381f8b6dacedfa7b05c6596844cdc8e0cf15fc9b430bde68e8800c
SHA512

ef70f5cf614f9df5b677d8b6b24a5e668ce4f28237c6a31798a72a4bc29a80fc92fc501c45f09c8ee0bd97dc0909e991f29d8290606ea3c08bdd2f67643f263c
SSDEEP

6144:j2nKwUTFbUqqtcfY8x9yKIbUqqtcfY8x9yKz:jzwUxblucw8x9yKIblucw8x9yKz

Score

N/A

Malware Config

Signatures

Files

b0814f2f82381f8b6dacedfa7b05c6596844cdc8e0cf15fc9b430bde68e8800c
.exe windows x86

bd795b3f6437b251f63e2157ecd5071a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcpy
strlen
strncpy
memmove
memcpy
_CIexp
_CIpow
malloc
free
fseek
ftell
fread
fclose

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
lstrcmpA
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
HeapFree
HeapAlloc
ReadFile
WideCharToMultiByte
FreeLibrary
LoadLibraryA
GetProcAddress
HeapReAlloc
CreateFileA

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos

comctl32

InitCommonControlsEx

ole32

CoInitialize

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

winmm

mciSendCommandA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd795b3f6437b251f63e2157ecd5071a

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

comctl32

ole32

odbc32

winmm

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 11KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 11KB