767a1ee909d8f95ebfa22dfb664c25f833f5beac015b99b9525f0cb1fe9406b8

Sharing

Copy URL

Twitter E-mail

General

Target

767a1ee909d8f95ebfa22dfb664c25f833f5beac015b99b9525f0cb1fe9406b8
Size

844KB
MD5

574387f9e389fa263889753cbb137dce
SHA1

6ff87eaf6e77519134fd4ac5e34a593f97aa79be
SHA256

767a1ee909d8f95ebfa22dfb664c25f833f5beac015b99b9525f0cb1fe9406b8
SHA512

b70386ea840cdef4885a259f92c3b6fdb833ccb8c0d4202acdb099aec271a4983b04de092d8979be0abe1bac09de80a7947469a938c143efca4bb0cb451b5dd8
SSDEEP

24576:algOmUPTdmtkQwyYBRLlwEky0NN2m+9QHpgdvxCH:OVm2Tdokt7flTkaQcx

Score

N/A

Malware Config

Signatures

Files

767a1ee909d8f95ebfa22dfb664c25f833f5beac015b99b9525f0cb1fe9406b8
.exe windows x86

0ed877cf805080d12d94780dbbd6a57f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

olecli32

LeQueryProtocol
DocWndProc
LeUpdate
GenSaveToStream
GenClone
GenSetData
MfChangeData
ErrUpdate
DibClone
BmEqual
OleSetLinkUpdateOptions
DibQueryBounds
OleSetHostNames
OleQueryBounds
PbCreateInvisible
OleSetColorScheme
DibGetData
LeSetHostNames
LeSetData
OleSavedClientDoc

kernel32

GetFileAttributesExA
GetConsoleAliasesLengthA
ZombifyActCtx
DebugActiveProcessStop
InitializeCriticalSection
ScrollConsoleScreenBufferA
FlushInstructionCache
EnumLanguageGroupLocalesA
GetModuleHandleW
GetConsoleAliasA
VirtualAlloc
IsProcessorFeaturePresent
ProcessIdToSessionId
LoadLibraryA
GetQueuedCompletionStatus
HeapCreate
AddConsoleAliasA
GetSystemDefaultLCID
ExpungeConsoleCommandHistoryW
GetWindowsDirectoryA
GetCompressedFileSizeW
SetStdHandle

odbccr32

SQLSetPos
SQLExecute
SQLTransact
SQLGetDescField
SQLBindCol
SQLSetDescRec
SQLFetch
SQLBulkOperations
SQLEndTran
SQLGetInfo
SQLSetStmtOption
SQLPrepare
SQLGetStmtOption
SQLNativeSql
SQLNumParams
SQLExtendedFetch
SQLSetDescField
SQLSetScrollOptions
SQLGetStmtAttr
SQLGetDescRec

gdi32

DdEntry3
EngCreateClip
DdEntry19
GetBkMode
SetFontEnumeration
GetTextAlign
GdiGetDevmodeForPage
AddFontMemResourceEx
GetNearestPaletteIndex
GdiEntry13
EngTransparentBlt
SetMapperFlags
CreateEllipticRgnIndirect
Ellipse
FONTOBJ_cGetAllGlyphHandles
TranslateCharsetInfo
ExtSelectClipRgn

kbdru1

KbdLayerDescriptor

Sections

.text
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ed877cf805080d12d94780dbbd6a57f

Headers

DLL Characteristics

File Characteristics

Imports

olecli32

kernel32

odbccr32

gdi32

kbdru1

Sections

.text Size: 730KB - Virtual size: 729KB

.rdata Size: 107KB - Virtual size: 107KB

.data Size: 3KB - Virtual size: 1.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 932B

.text
Size: 730KB - Virtual size: 729KB

.rdata
Size: 107KB - Virtual size: 107KB

.data
Size: 3KB - Virtual size: 1.5MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 932B