8a495b0269ce23d82d4465f8af99cdcb32babebcdcfbf41598c8c8fb47ded5ce

Sharing

Copy URL Twitter E-mail

General

Target

8a495b0269ce23d82d4465f8af99cdcb32babebcdcfbf41598c8c8fb47ded5ce
Size

68KB
MD5

f65c867241b2b7394cef108890894dbe
SHA1

ce3b480db809fb6a142d2aa6925155e07eb1f5a0
SHA256

8a495b0269ce23d82d4465f8af99cdcb32babebcdcfbf41598c8c8fb47ded5ce
SHA512

0cab6177d6ceb00329a315c95faf19a8b77c3f50bdde068412a8d0220820bd2f9b9e83467a59d92a6f0030bac73f09f57fbc7fb522a1d7feff0144d4c683beaa
SSDEEP

1536:h71Tcn98QE2EjfsGs/ffLH48Wq1rivhLjOz5CHU/mHLplXvY:B1An93EJs/8L2W6z0emHLr

Score

N/A

Malware Config

Signatures

Files

8a495b0269ce23d82d4465f8af99cdcb32babebcdcfbf41598c8c8fb47ded5ce
.dll windows x64

0953537bb5211ede33822ce315f864b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetConsoleMode
DeleteCriticalSection
VirtualAlloc
IsValidCodePage
LoadLibraryExA
GetOEMCP
Module32First
GetProcessHeaps
DeleteFileW
ExitProcess
GlobalLock
GetPrivateProfileSectionNamesA

ntdll

NtQueryPerformanceCounter
NtReadFile

Exports

Exports

CreateProcessNotisy
GetLogInfo
OpenTempTable3
GetCurrentIndex
CloseDatabase
Seek
GetColumnInfo
SetDatabaseSize
GetSecondaryIndexBookmark
GetTableColumnInfo
OpenFileSectionInstance
AddColumn
OpenTempTable
Init3
CreateTableColumnIndex2
MakeKey
GetDatabaseFileInfo
ComputeStats
EndSession
DeleteTable
TruncateLogInstance
Update
GetIndexInfo
ResetCounter
CreateTable
IndexRecordCount
OSSnapshotFreeze
EnumerateColumns
DetachDatabase
OpenFile
SetLS
CreateDatabaseWithStreaming
GrowDatabase
DeleteColumn
DeleteColumn2
GetDatabaseInfo
CreateTableColumnIndex
Idle
GetBookmark
SnapshotStart
GetCursorInfo
CreateInstance2
BeginTransaction2
SetColumns
OpenTempTable2
BeginSession
EndExternalBackupInstance
GetTableInfo
OSSnapshotThaw
SetCurrentIndex
CloseFile
OSSnapshotPrepare
ReadFile
StopServiceInstance
DBUtilities
GetLS
GetVersion
CommitTransaction
RestoreInstance
EnableMultiInstance
PrepareToCommitTransaction
ConvertDDL
ReadFileInstance
SetCurrentIndex3
GetLock
CreateIndex2
OpenTable
GetLogInfoInstance
GetLogInfoInstance2
AttachDatabaseWithStreaming
Defragment2
SetColumn
GotoBookmark
AttachDatabase
GetInstanceInfo
BackupInstance
BeginExternalBackupInstance
SetTableSequential
Move
Init2
GetRecordPosition
CloseTable
DupCursor
UpgradeDatabase
StopBackup
BeginTransaction
SnapshotStop
GetObjectInfo
GetAttachInfo
GotoPosition
GotoSecondaryIndexBookmark
GetAttachInfoInstance
FreeBuffer
GetTruncateLogInfoInstance
DetachDatabase2
ExternalRestore2
Restore2
Delete
GetTableIndexInfo
DeleteIndex
SetColumnDefaultValue
UnregisterCallback
Backup
IntersectIndexes
RetrieveTaggedColumnList
RegisterCallback
OpenDatabase
RenameTable
Term2
RetrieveKey
EndExternalBackupInstance2
SetSystemParameter
Rollback
Restore
OpenFileInstance
SetSessionContext
PrepareUpdate
CreateDatabase
GetCounter
TruncateLog
StopService
BeginExternalBackup
AttachDatabase2
Init
Term
ResetTableSequential
CreateInstance
CreateIndex
ExternalRestore
SetCurrentIndex4
StopBackupInstance
EndExternalBackup
DupSession
CloseFileInstance
SetIndexRange
ResetSessionContext
RetrieveColumn
Compact
GetSystemParameter
CreateDatabase2
RenameColumn
Defragment
RetrieveColumns

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0953537bb5211ede33822ce315f864b5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 8KB

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 8KB