801541b15574cb946266a9cf7a1968f041a4745faa4215504aad1d9c6b258b58

Sharing

Copy URL

Twitter E-mail

General

Target

801541b15574cb946266a9cf7a1968f041a4745faa4215504aad1d9c6b258b58
Size

831KB
MD5

6c86e2954e98009fff490e266610bef7
SHA1

379b280557bae723b2564618ae61dfdc6d29cce4
SHA256

801541b15574cb946266a9cf7a1968f041a4745faa4215504aad1d9c6b258b58
SHA512

b7fe8c9f7af53665b2611a6692b1626149b2da793d409e9db98446151b63dab824c13f6707ec53322fe3db5b9a11571ad020d90657658355c0cfe989a8f0be5a
SSDEEP

24576:Jm3zF8fyRec7hpMK9kqYx9ePcgvJxHfvSEdk:A3xZ7cKehyPcgxNfaEdk

Score

N/A

Malware Config

Signatures

Files

801541b15574cb946266a9cf7a1968f041a4745faa4215504aad1d9c6b258b58
.exe windows x86

a7ddb0db6943302154adf98d9f26d640

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleConvertOLESTREAMToIStorage
CreateDataAdviseHolder
CoLockObjectExternal
HACCEL_UserSize
OleSetClipboard
OleLoadFromStream
StringFromGUID2
HENHMETAFILE_UserFree
CreateObjrefMoniker
HBRUSH_UserUnmarshal
HACCEL_UserMarshal
PropVariantChangeType
CoGetClassVersion
OleConvertIStorageToOLESTREAMEx
HBITMAP_UserSize
OleDuplicateData
StgCreateStorageEx
HMENU_UserSize
StgOpenStorage
CoGetCallerTID
UtGetDvtd16Info
CoQueryClientBlanket
HMETAFILE_UserSize
IsAccelerator
CoGetStandardMarshal
CoGetObjectContext
CoEnableCallCancellation
FreePropVariantArray
CoGetCancelObject
CoReactivateObject
HBITMAP_UserUnmarshal
StgGetIFillLockBytesOnILockBytes
HMENU_UserUnmarshal
CoInvalidateRemoteMachineBindings
WdtpInterfacePointer_UserSize
CoRegisterClassObject
HICON_UserSize
CoGetPSClsid
OleCreateLinkToFileEx
SNB_UserFree
CoMarshalInterThreadInterfaceInStream

sqlunirl

_RegDeleteKey_@8
_NDdeSetShareSecurity_@16
_GlobalAddAtom_@4
_GetDateFormat_@24
_FindResourceEx_@16
_CharToOemBuff_@12
_GetDriveType_@4
_PeekMessage@20
_tsystem
_GetDiskFreeSpace_@20
_ChooseColor_@4
_SetProp@12
_CommDlg_OpenSave_GetFolderPath@12
_GetSystemDirectory_@8
_SHGetPathFromIDList_@8
_CallWindowProc@20
_OpenDesktop_@16
_FindExecutable_@12

kernel32

WaitForSingleObject
GetOverlappedResult
Toolhelp32ReadProcessMemory
OpenWaitableTimerA
RemoveLocalAlternateComputerNameA
GetStdHandle
CreateProcessInternalA
GetCurrentThread
GetStartupInfoA
LoadLibraryA
GetCurrentDirectoryA
SignalObjectAndWait
OpenFileMappingA
QueryPerformanceCounter
SetConsoleCursorInfo
SetConsoleInputExeNameA
SetSystemTime
VirtualAlloc
GetSystemDefaultLCID
WriteConsoleW
GetVersionExW
_lcreat
GetLogicalDriveStringsA
ConsoleMenuControl
SetLastError
Heap32ListNext
GetCurrencyFormatA

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7ddb0db6943302154adf98d9f26d640

Headers

DLL Characteristics

File Characteristics

Imports

ole32

sqlunirl

kernel32

Sections

.text Size: 247KB - Virtual size: 247KB

.rdata Size: 295KB - Virtual size: 294KB

.data Size: 284KB - Virtual size: 1.6MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 247KB - Virtual size: 247KB

.rdata
Size: 295KB - Virtual size: 294KB

.data
Size: 284KB - Virtual size: 1.6MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB