931a5b5d67b1f62d1bb8a003986f817d66602f9342496b854d68e20fe805b910

Sharing

Copy URL Twitter E-mail

General

Target

931a5b5d67b1f62d1bb8a003986f817d66602f9342496b854d68e20fe805b910
Size

842KB
MD5

9d7d7f3223c0ecb3968a53241183afaa
SHA1

29a3b64465a7c85a2ebdf3333c633880870da0e2
SHA256

931a5b5d67b1f62d1bb8a003986f817d66602f9342496b854d68e20fe805b910
SHA512

d3150017db365df0db297dcf394da0f4807caa05621db403c254b148de35cec0f589228f7678d49b3c27e73891b008b43d997296930f5d688f3f69f60d7800e1
SSDEEP

24576:A3jmnBotlq9AUPbYysirUvQsafhfp/Xnf2/qy0m+O:anlq9bKQsch8l

Score

N/A

Malware Config

Signatures

Files

931a5b5d67b1f62d1bb8a003986f817d66602f9342496b854d68e20fe805b910
.exe windows x86

1f6e5881fe87a6b84c7428eb0827e675

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

odbc32

SQLAllocHandle
SQLConnect
SQLGetDiagFieldW
SQLCopyDesc
SQLSetCursorNameW
SearchStatusCode
SQLGetDescRecA
SQLDescribeCol
PostODBCError
SQLAllocEnv
SQLNumParams
SQLPutData
SQLExecDirect
SQLForeignKeysW
PostComponentError
SQLDisconnect
SQLFreeEnv
SQLColAttributeA
SQLExecDirectW

ws2help

WahReferenceContextByHandle
WahEnumerateHandleContexts
WahNotifyAllProcesses
WahCreateSocketHandle
WahCompleteRequest
WahDestroyHandleContextTable
WahCreateHandleContextTable
WahOpenNotificationHandleHelper
WahEnableNonIFSHandleSupport
WahInsertHandleContext
WahCloseSocketHandle
WahCloseHandleHelper
WahRemoveHandleContext
WahCloseThread
WahWaitForNotification
WahDisableNonIFSHandleSupport
WahOpenApcHelper
WahCreateNotificationHandle
WahCloseApcHelper
WahCloseNotificationHandleHelper
WahOpenHandleHelper
WahQueueUserApc
WahOpenCurrentThread

atmlib

ATMEnumMMFonts
ATMGetBuildStrW
ATMRemoveFontA
ATMMakePFM
ATMGetOutlineA
ATMAddFontExA
ATMGetFontInfoW
ATMGetFontPaths
ATMGetNtmFieldsA
ATMGetNtmFields
ATMBBoxBaseXYShowTextA
ATMGetGlyphListW
ATMFontStatusA
ATMRemoveSubstFontW
ATMInstallSubstFontA
ATMFontAvailableA
ATMGetVersion
ATMEnumFontsW
ATMGetVersionEx
ATMFontSelected
ATMFinish
ATMRemoveFontW
ATMGetVersionExW
ATMGetMenuNameA

kernel32

GetShortPathNameA
OpenFileMappingW
GetTempFileNameA
GetTempFileNameW
ReadConsoleOutputAttribute
Process32NextW
RaiseException
InitializeCriticalSection
CreateSemaphoreW
FileTimeToLocalFileTime
WaitForMultipleObjects
WritePrivateProfileStructA
SetErrorMode
Process32Next
RemoveVectoredExceptionHandler
GetComputerNameA
GetPrivateProfileStringA
FindFirstFileW
CreateDirectoryExA
IsValidLocale
EnumCalendarInfoExA
EnumSystemLocalesA
SetConsoleScreenBufferSize
HeapSetInformation
CreateActCtxA
WTSGetActiveConsoleSessionId
WideCharToMultiByte
GetNativeSystemInfo
Module32NextW
GetNextVDMCommand
GlobalAddAtomA
PostQueuedCompletionStatus
GetNumberFormatA
LoadLibraryA
CmdBatNotification
FreeEnvironmentStringsA
VirtualAlloc
FindAtomW
SetHandleContext
OpenFile
GetPriorityClass
DosPathToSessionPathA
GetPrivateProfileStringW
GetConsoleTitleW
FindNextChangeNotification

user32

GetWindowRect
DdeQueryStringA
SetWindowWord
MapDialogRect
InitializeLpkHooks
SetWindowsHookExA
SetCursor
OpenWindowStationW
GetWindowRgnBox
GetThreadDesktop
SwapMouseButton
GetClassInfoA
SetScrollInfo
SetLayeredWindowAttributes
EnterReaderModeHelper
CreateIconFromResourceEx
DefDlgProcA
DisableProcessWindowsGhosting
AppendMenuA
GetKeyboardState

msvcrt

exit

Sections

.text
Size: 463KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 371KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f6e5881fe87a6b84c7428eb0827e675

Headers

DLL Characteristics

File Characteristics

Imports

odbc32

ws2help

atmlib

kernel32

user32

msvcrt

Sections

.text Size: 463KB - Virtual size: 462KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 371KB - Virtual size: 1.8MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 352B

.text
Size: 463KB - Virtual size: 462KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 371KB - Virtual size: 1.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 352B