5ce991a312cfbf779609e4bcbfe3449138cde63d84fd32dcc07353412aa8cffe

Sharing

Copy URL Twitter E-mail

General

Target

5ce991a312cfbf779609e4bcbfe3449138cde63d84fd32dcc07353412aa8cffe
Size

133KB
MD5

6eb68d6440e08a14f4becd1a4eb123e9
SHA1

3c1707cd50192f349591fe2533bfe6dc884708f5
SHA256

5ce991a312cfbf779609e4bcbfe3449138cde63d84fd32dcc07353412aa8cffe
SHA512

a8fba926acf9f365c5fb959c5830121bd6788ae1331c82d6e486d99d7922b208cdb53315903bc87615cc9ad7a510598b3454688ce0420eaf8b84c14e0c609b07
SSDEEP

3072:HoTX7HeZygZtmRbzK9WEgmQa0Gy0pdwFvhRZewvW2jR3l4iTdWPq79:HmqZFIuWEgmh0j0/8ewvRjRV4iTdT

Score

N/A

Malware Config

Signatures

Files

5ce991a312cfbf779609e4bcbfe3449138cde63d84fd32dcc07353412aa8cffe
.exe windows x86

0d94a0dc05bac17e34622227e3732f67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

inetcomm

HrGetAttachIcon
CreateIMAPTransport
CreatePOP3Transport
EssMLHistoryEncodeEx
MimeOleFindCharset
MimeOleSetPropW
MimeOleGetRelatedSection
CreateRASTransport
MimeOleGetPropertySchema
MimeOleEncodeHeader
MimeOleCreateSecurity
EssKeyExchPreferenceDecodeEx
MimeOleDecodeHeader
CreateIMAPTransport2
HrGetDisplayNameWithSizeForFile
MimeOleGenerateCID
MimeOleCreateMessageParts
MimeEditViewSource
MimeOleGetPropA
MimeOleGetDefaultCharset
MimeOleConvertEnrichedToHTML
EssContentHintDecodeEx
EssSecurityLabelDecodeEx
HrGetLastOpenFileDirectoryW
EssMLHistoryDecodeEx
MimeEditCreateMimeDocument

kernel32

UTRegister
GetConsoleAliasesLengthW
SetFileApisToANSI
LCMapStringW
GetCurrentThread
CreateMutexA
IsBadStringPtrW
GetVolumePathNamesForVolumeNameW
LoadLibraryW
SetLocaleInfoW
GetModuleHandleW
ZombifyActCtx
FindVolumeClose
GetCompressedFileSizeA
GetLocaleInfoW
VerLanguageNameA
GetModuleFileNameW
FlushFileBuffers
SetCommTimeouts
GetConsoleScreenBufferInfo
FindNextVolumeA

crypt32

CertAddEncodedCertificateToSystemStoreA
CertEnumCertificateContextProperties
CertDuplicateCTLContext
CryptHashMessage
CertIsRDNAttrsInCertificateName
CertFreeCTLContext
I_CryptSetTls
CertFindCRLInStore
CertNameToStrA
CryptSIPRetrieveSubjectGuidForCatalogFile
CryptFindLocalizedName
CryptMsgVerifyCountersignatureEncodedEx
RegCreateKeyExU
CertDuplicateCertificateChain
CertAddCRLLinkToStore
CertAddEnhancedKeyUsageIdentifier
CryptVerifyDetachedMessageHash
CertAddSerializedElementToStore
CertCreateContext
I_CryptInsertLruEntry

odbctrac

TraceSQLSetParam
TraceSQLSetDescFieldW
TraceOpenLogFile
FireVSDebugEvent
TraceSQLGetInfo
TraceSQLDrivers
TraceSQLEndTran
TraceSQLConnect
TraceSQLDescribeCol
TraceSQLProcedures
TraceSQLPrepareW
TraceSQLGetTypeInfo
TraceSQLColAttributesW
TraceSQLSetEnvAttr
TraceCloseLogFile

mfcsubs

??1CObject@@UAE@XZ
?GetHashTableSize@CMapStringToPtr@@QBEIXZ
??YCString@@QAEABV0@PBG@Z
?LookupKey@CMapStringToPtr@@QBEHPBGAAPBG@Z
?RemoveAll@CStringArray@@QAEXXZ
??N@YG_NPBGABVCString@@@Z
?LoadStringW@CString@@QAEHI@Z
?FreeExtra@CStringArray@@QAEXXZ
?ConcatCopy@CString@@IAEXHPBGH0@Z
?Add@CStringArray@@QAEHPBG@Z
??1CMapStringToPtr@@UAE@XZ
??0CString@@QAE@PBG@Z
?GetData@CStringArray@@QAEPAVCString@@XZ
?AfxW2AHelper@@YGPADPADPBGH@Z
??0CMapStringToPtr@@QAE@H@Z
?Empty@CString@@QAEXXZ
?ReleaseBuffer@CString@@QAEXH@Z
?GetSize@CStringArray@@QBEHXZ
?GetStartPosition@CMapStringToPtr@@QBEPAU__POSITION@@XZ
?Unlock@CSyncObject@@UAEHJPAJ@Z
?Collate@CString@@QBEHPBG@Z
??4CString@@QAEABV0@PBE@Z
??_7CStringArray@@6B@
?AfxExtractSubString@@YGHAAVCString@@PBGHG@Z
?Find@CString@@QBEHG@Z
??0CString@@QAE@PBE@Z

oleaut32

SafeArrayAllocDescriptorEx
VarUI4FromI1
VariantTimeToDosDateTime
SysAllocStringLen
VarCyAbs
LHashValOfNameSysA
VarUI2FromDisp
VarUI4FromUI8
DispInvoke
VarDateFromI2
SysAllocString
SafeArrayCopyData
VarCyCmpR8
VarCyRound
VarParseNumFromStr
VarI4FromUI8
LPSAFEARRAY_UserFree

shsvcs

CreateHardwareEventMoniker
HardwareDetectionServiceMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d94a0dc05bac17e34622227e3732f67

Headers

File Characteristics

Imports

inetcomm

kernel32

crypt32

odbctrac

mfcsubs

oleaut32

shsvcs

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 17KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB