5a3b7da7c19c9dca91d5fe2bfa0997993519246fce3f0fd36737f7c251e686bd

Sharing

Copy URL

Twitter E-mail

General

Target

5a3b7da7c19c9dca91d5fe2bfa0997993519246fce3f0fd36737f7c251e686bd
Size

133KB
MD5

300f007c3d7a37789c8951e0a3114b05
SHA1

2833b5b6b2df3081ba3f063405422bf590e758df
SHA256

5a3b7da7c19c9dca91d5fe2bfa0997993519246fce3f0fd36737f7c251e686bd
SHA512

86009766846421abd9ac423d9a8143ce2e8a56c97feef81aea913c5f6404f4a85c48e42347a4e66dbb4ccbfa3a91e3f8077df8ad4ec54d40474bf1360be2f46d
SSDEEP

3072:HoTX7HeZygZtmRbzK9WEgmQa0Gy0pdwFvhRZewvW2jR3l4iTdWPqj:HmqZFIuWEgmh0j0/8ewvRjRV4iTdx

Score

N/A

Malware Config

Signatures

Files

5a3b7da7c19c9dca91d5fe2bfa0997993519246fce3f0fd36737f7c251e686bd
.exe windows x86

0d94a0dc05bac17e34622227e3732f67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

inetcomm

HrGetAttachIcon
CreateIMAPTransport
CreatePOP3Transport
EssMLHistoryEncodeEx
MimeOleFindCharset
MimeOleSetPropW
MimeOleGetRelatedSection
CreateRASTransport
MimeOleGetPropertySchema
MimeOleEncodeHeader
MimeOleCreateSecurity
EssKeyExchPreferenceDecodeEx
MimeOleDecodeHeader
CreateIMAPTransport2
HrGetDisplayNameWithSizeForFile
MimeOleGenerateCID
MimeOleCreateMessageParts
MimeEditViewSource
MimeOleGetPropA
MimeOleGetDefaultCharset
MimeOleConvertEnrichedToHTML
EssContentHintDecodeEx
EssSecurityLabelDecodeEx
HrGetLastOpenFileDirectoryW
EssMLHistoryDecodeEx
MimeEditCreateMimeDocument

kernel32

UTRegister
GetConsoleAliasesLengthW
SetFileApisToANSI
LCMapStringW
GetCurrentThread
CreateMutexA
IsBadStringPtrW
GetVolumePathNamesForVolumeNameW
LoadLibraryW
SetLocaleInfoW
GetModuleHandleW
ZombifyActCtx
FindVolumeClose
GetCompressedFileSizeA
GetLocaleInfoW
VerLanguageNameA
GetModuleFileNameW
FlushFileBuffers
SetCommTimeouts
GetConsoleScreenBufferInfo
FindNextVolumeA

crypt32

CertAddEncodedCertificateToSystemStoreA
CertEnumCertificateContextProperties
CertDuplicateCTLContext
CryptHashMessage
CertIsRDNAttrsInCertificateName
CertFreeCTLContext
I_CryptSetTls
CertFindCRLInStore
CertNameToStrA
CryptSIPRetrieveSubjectGuidForCatalogFile
CryptFindLocalizedName
CryptMsgVerifyCountersignatureEncodedEx
RegCreateKeyExU
CertDuplicateCertificateChain
CertAddCRLLinkToStore
CertAddEnhancedKeyUsageIdentifier
CryptVerifyDetachedMessageHash
CertAddSerializedElementToStore
CertCreateContext
I_CryptInsertLruEntry

odbctrac

TraceSQLSetParam
TraceSQLSetDescFieldW
TraceOpenLogFile
FireVSDebugEvent
TraceSQLGetInfo
TraceSQLDrivers
TraceSQLEndTran
TraceSQLConnect
TraceSQLDescribeCol
TraceSQLProcedures
TraceSQLPrepareW
TraceSQLGetTypeInfo
TraceSQLColAttributesW
TraceSQLSetEnvAttr
TraceCloseLogFile

mfcsubs

??1CObject@@UAE@XZ
?GetHashTableSize@CMapStringToPtr@@QBEIXZ
??YCString@@QAEABV0@PBG@Z
?LookupKey@CMapStringToPtr@@QBEHPBGAAPBG@Z
?RemoveAll@CStringArray@@QAEXXZ
??N@YG_NPBGABVCString@@@Z
?LoadStringW@CString@@QAEHI@Z
?FreeExtra@CStringArray@@QAEXXZ
?ConcatCopy@CString@@IAEXHPBGH0@Z
?Add@CStringArray@@QAEHPBG@Z
??1CMapStringToPtr@@UAE@XZ
??0CString@@QAE@PBG@Z
?GetData@CStringArray@@QAEPAVCString@@XZ
?AfxW2AHelper@@YGPADPADPBGH@Z
??0CMapStringToPtr@@QAE@H@Z
?Empty@CString@@QAEXXZ
?ReleaseBuffer@CString@@QAEXH@Z
?GetSize@CStringArray@@QBEHXZ
?GetStartPosition@CMapStringToPtr@@QBEPAU__POSITION@@XZ
?Unlock@CSyncObject@@UAEHJPAJ@Z
?Collate@CString@@QBEHPBG@Z
??4CString@@QAEABV0@PBE@Z
??_7CStringArray@@6B@
?AfxExtractSubString@@YGHAAVCString@@PBGHG@Z
?Find@CString@@QBEHG@Z
??0CString@@QAE@PBE@Z

oleaut32

SafeArrayAllocDescriptorEx
VarUI4FromI1
VariantTimeToDosDateTime
SysAllocStringLen
VarCyAbs
LHashValOfNameSysA
VarUI2FromDisp
VarUI4FromUI8
DispInvoke
VarDateFromI2
SysAllocString
SafeArrayCopyData
VarCyCmpR8
VarCyRound
VarParseNumFromStr
VarI4FromUI8
LPSAFEARRAY_UserFree

shsvcs

CreateHardwareEventMoniker
HardwareDetectionServiceMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d94a0dc05bac17e34622227e3732f67

Headers

File Characteristics

Imports

inetcomm

kernel32

crypt32

odbctrac

mfcsubs

oleaut32

shsvcs

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 17KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB