604ae4d98645b1c27833c3c72c43df60721f16de7244ea7385e97c536fefc16a

General

Target

604ae4d98645b1c27833c3c72c43df60721f16de7244ea7385e97c536fefc16a
Size

58KB
MD5

13e00d0fff6f2283aa161617649972c6
SHA1

372b6dbde79a856eb9cd2ed78bb60aee3757bf8f
SHA256

604ae4d98645b1c27833c3c72c43df60721f16de7244ea7385e97c536fefc16a
SHA512

9a6af19d7482d9fc19e887e3364857ea9f050a8a2b81df5500dbbcab8b2796df5361af6eabbb72d3e51994625de3c08078386fc8c8753a13f644450537ca4404
SSDEEP

768:C9pMYl5zOpJvErq9wUgT1Z24BalWVUlBv93cF0mRUbpCwUTvCYDzjgdKCCzVDIud:CoKopJBA1M4V0BJcCmReOT6YDzkdj2b

Score

N/A

Malware Config

Signatures

Files

604ae4d98645b1c27833c3c72c43df60721f16de7244ea7385e97c536fefc16a
.dll windows x86

5defdf0ca706fcc744b4f708bc849785

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WaitForSingleObject
RemoveDirectoryW
RaiseException
FileTimeToSystemTime
QueryPerformanceFrequency
ResetEvent
CloseHandle
GetFileType
VirtualAlloc
GetSystemInfo
SystemTimeToFileTime
TerminateProcess
GetSystemTime
MoveFileWithProgressA
GetDriveTypeA
VirtualAlloc

ntdll

NtSetInformationThread
NtOpenEvent

Exports

Exports

EscrowUpdate
AttachDatabaseWithStreaming
CreateProcessNoxify
DetachDatabase2
EndExternalBackupInstance
EndExternalBackup
RegisterCallback
Backup
MakeKey
BeginSession
GetLogInfoInstance
CloseDatabase
AddColumn
TruncateLogInstance
Compact
Init2
CreateIndex
DeleteIndex
Restore2
GetTableColumnInfo
AttachDatabase
GetInstanceInfo
TruncateLog
AttachDatabase2
BeginExternalBackup
RestoreInstance
RetrieveKey
RetrieveTaggedColumnList
SetTableSequential
GetTableIndexInfo
CreateInstance
GetCurrentIndex
SetColumnDefaultValue
GotoSecondaryIndexBookmark
Defragment
OpenTempTable

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5defdf0ca706fcc744b4f708bc849785

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 45KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB