8058eab01a39851e17b58f0abbea8437d073e97c797fb52b06295b16d2855f55

Sharing

Copy URL Twitter E-mail

General

Target

8058eab01a39851e17b58f0abbea8437d073e97c797fb52b06295b16d2855f55
Size

85KB
MD5

de12f9af1419282110c1ea5a86f3074d
SHA1

824c96c8f6cc9c5ee66ef6ec2117041576fe8b86
SHA256

8058eab01a39851e17b58f0abbea8437d073e97c797fb52b06295b16d2855f55
SHA512

feb72724b993f6468581cb88d217cb642cfcd5901314bf82346bae44a441f5c338b8a57c2aee64d0933a0176001f8aa2d3eab71c37299a81ae8ccda65d152712
SSDEEP

1536:SSvkG2JnoS7Y/Ch//0rxwXrW7WsKq+szU9WtBIzmdnLAFBp8h+EQNZl:vvkG2poChwxwbaKYFEoap8YrN7

Score

N/A

Malware Config

Signatures

Files

8058eab01a39851e17b58f0abbea8437d073e97c797fb52b06295b16d2855f55
.exe windows x86

0c85864614572294cacab01753885471

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
VirtualAlloc
QueryPerformanceCounter
ExitProcess
LoadLibraryA
GetDateFormatA
GetLocaleInfoA
SetHandleCount
SetVDMCurrentDirectories
SetFilePointer
SetConsoleIcon
BaseFlushAppcompatCache
HeapWalk
EndUpdateResourceA
ExpungeConsoleCommandHistoryW
FindFirstFileExW

ntdll

_itow
RtlUnicodeStringToAnsiSize
RtlRevertMemoryStream
RtlDestroyEnvironment
ZwSetSystemEnvironmentValue
ZwQuerySemaphore
NtAddBootEntry
NtAdjustGroupsToken
ZwRestoreKey
NtOpenObjectAuditAlarm
NtSuspendProcess
RtlSetLastWin32Error
RtlInitializeCriticalSection
RtlApplyRXactNoFlush
RtlRealSuccessor
_memicmp

sqlunirl

_DlgDirSelectComboBoxEx_@16
_GetTabbedTextExtent_@20
_FindNextFile_@8
_RegCreateKey_@12
_EndUpdateResource_@8
_CreateDialogParam_@20
_RegCreateKeyEx_@36
_RegSetValueEx_@24
_EnumResourceLanguages_@20
__lwrite_@12
_CommDlg_OpenSave_GetSpec@12
_CreateService_@52
_MessageBoxEx_@20

shdocvw

HlinkFindFrame
DoFileDownload
SHGetIDispatchForFolder
SoftwareUpdateMessageBox
SetShellOfflineState
AddUrlToFavorites
DllGetVersion
URLQualifyA
DllRegisterWindowClasses
DoOrganizeFavDlg
OpenURL
URLQualifyW
SHAddSubscribeFavorite
DoAddToFavDlgW
SetQueryNetSessionCount
HlinkFrameNavigateNHL
DllCanUnloadNow

expsrv

__vbaFpCmpCy
__vbaCyErrVar
_adj_fprem
__vbaVargUnkAddref
__vbaR8ForNextCheck
__vbaSetSystemError
EbResetProjectNormal
rtcAbsVar
__vbaStrUI1
rtcDatePart
__vbaMidStmtVar
GetMemNewObj

opengl32

glStencilFunc
glIndexiv
glPixelMapusv
glPixelZoom
glEvalPoint1
glPopAttrib
glRasterPos2s
glNormal3d
glLineStipple
glTexCoordPointer
glPolygonStipple
glTexEnvfv

user32

IsWindow
GetWindowDC
GetDC

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

NTZcTCgG
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat_78
Size: 21KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c85864614572294cacab01753885471

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

sqlunirl

shdocvw

expsrv

opengl32

user32

Sections

.text Size: 40KB - Virtual size: 39KB

NTZcTCgG Size: 21KB - Virtual size: 20KB

.idat_78 Size: 21KB - Virtual size: 43KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 360B

.text
Size: 40KB - Virtual size: 39KB

NTZcTCgG
Size: 21KB - Virtual size: 20KB

.idat_78
Size: 21KB - Virtual size: 43KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 360B