cb104a47062e2270cc56224574ed9f4c28fe903d7186df0b6e35b4e098f17ea2

General

Target

cb104a47062e2270cc56224574ed9f4c28fe903d7186df0b6e35b4e098f17ea2
Size

320KB
MD5

493c555bccb8c87ef8f95e6f55f42e14
SHA1

163beaecfa6b0f70d75a620647068b87d629e782
SHA256

cb104a47062e2270cc56224574ed9f4c28fe903d7186df0b6e35b4e098f17ea2
SHA512

bc8ff4922d6cd26834294b5c27c64372511e5a966a4fd52a445aa71efce296eb910185fd5783f569df7531b5ddff6d69d2ce4ec12b5f93e258d1c691613acc56
SSDEEP

6144:78t7NaDc/A3OWgDbNKOu/Pz2nPMnqhKZhxGQK92Kra7iMos+4ItsH9JM50:07QDmAW3VezoMqhohO9w7hslL50

Score

N/A

Malware Config

Signatures

Files

cb104a47062e2270cc56224574ed9f4c28fe903d7186df0b6e35b4e098f17ea2
.exe windows x86

b86b9bc9aec086602acc01056fb54cbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fseek
ftell
fread
__p__iob
fclose
strlen
strcpy
malloc
free
calloc
fprintf
vsprintf
realloc
strncpy
_CIpow
ceil
floor
printf
memmove
_errno
_msize

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetExitCodeProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

user32

GetForegroundWindow

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b86b9bc9aec086602acc01056fb54cbf

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

odbc32

Sections

.code Size: 9KB - Virtual size: 9KB

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 4KB

.code
Size: 9KB - Virtual size: 9KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 4KB