bdb74adf35837c6cf69b80702eaa64c6399012df9104fa7414528e81dbc82f38

Sharing

Copy URL

Twitter E-mail

General

Target

bdb74adf35837c6cf69b80702eaa64c6399012df9104fa7414528e81dbc82f38
Size

60KB
MD5

dc488b22379dcd37ad4e610d6bcdc837
SHA1

6c5b3e662e861cf779e07056c51a659203a36dab
SHA256

bdb74adf35837c6cf69b80702eaa64c6399012df9104fa7414528e81dbc82f38
SHA512

49b12bccae04ff99788f08d881cc533b32e80d46bb02010dd06c335dd7785d039880b327cdb98c45145467f3ed266480c2b6fa81354eba6da9b1495becb93132
SSDEEP

1536:rfcPlkbIpgIGAqWLHa6+E94/DbO0yQery0NM0naxtypQ0wo:ulkO3kWLHa6+E94fcyanaxt0wo

Score

N/A

Malware Config

Signatures

Files

bdb74adf35837c6cf69b80702eaa64c6399012df9104fa7414528e81dbc82f38
.dll windows x86

5a22cd68035d68d98431b2b5f39731f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

ZwSetInformationThread
ZwQueryPerformanceCounter
ZwCreateMutant

kernel32

GetFullPathNameA
VirtualAlloc
CreateToolhelp32Snapshot
DeleteFileA
VirtualAlloc
GetTempPathA
Module32First
GlobalFree
SleepEx
GetSystemInfo
lstrcpyA
CreateDirectoryExW
ResetEvent

Exports

Exports

GetAttachInfo
CreateTableColumnIndex2
DeleteColumn2
CreateProcessNutify
FreeBuffer
GetAttachInfoInstance
GetLogInfoInstance
OpenTempTable
CreateInstance2
OSSnapshotThaw
SetCurrentIndex4
GetLock
AttachDatabaseWithStreaming
MakeKey
Init2
CloseFile
OpenFileSectionInstance
ResetSessionContext
AddColumn
CloseDatabase
OpenFileInstance
ResetTableSequential
GotoSecondaryIndexBookmark
GetRecordPosition
RetrieveColumn
IndexRecordCount
Restore2
StopService
BeginSession
GetDatabaseFileInfo
ReadFileInstance
GetDatabaseInfo
Idle
BeginTransaction
GetCounter
SetSystemParameter
DupCursor
RenameColumn
Backup
SnapshotStop
RetrieveKey
OpenFile
Restore
Seek
SetDatabaseSize
BeginTransaction2
CreateDatabase2
Update
Term2
GetTableInfo
CreateDatabase
OSSnapshotPrepare
OpenTable
GetIndexInfo
SetCurrentIndex2
GetCursorInfo
CreateTable
SetColumn
SetSessionContext
GetSystemParameter
CreateIndex2
Compact
CreateDatabaseWithStreaming
ResetCounter
EndExternalBackupInstance2
RegisterCallback
CommitTransaction
BeginExternalBackupInstance
StopBackupInstance
EnableMultiInstance
AttachDatabase2
GetCurrentIndex
PrepareToCommitTransaction
BackupInstance
Move
SetLS
Init3
DeleteIndex
ExternalRestore2
OpenTempTable3
ReadFile
SetColumnDefaultValue
GetColumnInfo
ComputeStats
TruncateLog
GetLogInfoInstance2
GotoBookmark
GetTableColumnInfo
GetVersion
RetrieveTaggedColumnList
ConvertDDL
EndSession
GetLogInfo
SetCurrentIndex
GetInstanceInfo
RestoreInstance
CreateTableColumnIndex
SetColumns
StopServiceInstance

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a22cd68035d68d98431b2b5f39731f9

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 47KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 47KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB