d1543013d06426ca703680b0a1721f92ea84ec6b0173fc0dc563afb87c03fc0a

Sharing

Copy URL

Twitter E-mail

General

Target

d1543013d06426ca703680b0a1721f92ea84ec6b0173fc0dc563afb87c03fc0a
Size

825KB
MD5

c1f65ea9df06f9e57a7809bc884ca5c6
SHA1

86fb59ee37ba9e3442115301a4612536428a8748
SHA256

d1543013d06426ca703680b0a1721f92ea84ec6b0173fc0dc563afb87c03fc0a
SHA512

962200992708cfbeb2ce272bcb3fc87f0207cd3da1132d0699ed2dad2509df9a7ca79ca4288e485330b9d1aa0d85f45f13190fe19430fd3c6c5321cdae7f44ab
SSDEEP

24576:3pJWBOzPnLfhq6sLPyqaUtCTApibrhhFS1Nchzmd73:3TPLc7ztumwSXqzE

Score

N/A

Malware Config

Signatures

Files

d1543013d06426ca703680b0a1721f92ea84ec6b0173fc0dc563afb87c03fc0a
.exe windows x86

7869533901c7725caf68a98b87946541

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
RemoveDirectoryA
SetVolumeLabelW
GetProcessWorkingSetSize
GetLocaleInfoA
SetProcessShutdownParameters
SetEnvironmentVariableW
FindNextFileA
ReleaseSemaphore
LockFile
lstrcmpiA
GetConsoleCP
EscapeCommFunction
QueryPerformanceCounter
GetConsoleInputWaitHandle
LoadLibraryW
GetModuleHandleW
GetSystemDirectoryW
CmdBatNotification
SetConsoleCtrlHandler
FindFirstVolumeMountPointA
GetCurrentThread
GetNumberOfConsoleMouseButtons
GetSystemDefaultLCID

gdi32

GdiAlphaBlend
BRUSHOBJ_pvAllocRbrush
DdEntry34
EngLineTo
SetMapMode
ColorCorrectPalette
EngLockSurface
DdEntry23
GdiGradientFill
GetCharABCWidthsFloatW
ExtTextOutA
GdiEntry2
GdiConvertPalette
CopyMetaFileW
PlgBlt
GetTextExtentExPointW
PlayEnhMetaFileRecord
GetTextMetricsA
CreateFontIndirectW
GetEnhMetaFileDescriptionW
DdEntry26
SetDIBColorTable
GdiGetDC

user32

SetCaretPos
ImpersonateDdeClientWindow
GetWindowModuleFileName
TranslateMessage
GetRawInputData
GetWindowThreadProcessId
PaintDesktop
FindWindowA
SetWindowPlacement
SetShellWindowEx
HideCaret

uxtheme

GetWindowTheme
GetThemeMetric
GetThemeTextExtent
GetThemeDocumentationProperty
GetThemeSysColorBrush
IsThemeDialogTextureEnabled
GetThemeTextMetrics
GetThemeSysInt
SetThemeAppProperties
GetThemeSysFont
GetThemePosition
GetThemeBackgroundExtent
GetThemeEnumValue
DrawThemeBackground
GetThemeSysString

certcli

CAGetCertTypeExpiration
CAOIDFreeLdapURL
CAFindByCertType
CADeleteCertType
CAEnumCertTypesEx
CAOIDDelete
CASetCAFlags
CADeleteCA
CACloneCertType
CACloseCA
DllGetClassObject
CACertTypeRegisterQuery
CAOIDGetProperty
CAGetCertTypeExtensions
CACertTypeAccessCheckEx
CASetCertTypeKeySpec

softpub

DriverFinalPolicy
SoftpubCleanup
FindCertsByIssuer
GenericChainFinalProv
DllUnregisterServer
SoftpubDefCertInit
OfficeCleanupPolicy
DllRegisterServer
DriverInitializePolicy
SoftpubInitialize
SoftpubCheckCert
OpenPersonalTrustDBDialog
OfficeInitializePolicy
DriverCleanupPolicy
AddPersonalTrustDBPages
SoftpubLoadSignature
SoftpubFreeDefUsageCallData
GenericChainCertificateTrust
SoftpubLoadDefUsageCallData
HTTPSFinalProv
SoftpubDumpStructure
HTTPSCertificateTrust

vfpodbc

SQLSetConnectOption
ConfigDSNEx
ConfigDSN
??4CVfpodbc@@QAEAAV0@ABV0@@Z
fnVfpodbc
LibMain

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 165KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7869533901c7725caf68a98b87946541

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

uxtheme

certcli

softpub

vfpodbc

Sections

.text Size: 360KB - Virtual size: 359KB

.rdata Size: 161KB - Virtual size: 161KB

.data Size: 165KB - Virtual size: 1.6MB

.rsrc Size: 136KB - Virtual size: 136KB

.reloc Size: 1024B - Virtual size: 868B

.text
Size: 360KB - Virtual size: 359KB

.rdata
Size: 161KB - Virtual size: 161KB

.data
Size: 165KB - Virtual size: 1.6MB

.rsrc
Size: 136KB - Virtual size: 136KB

.reloc
Size: 1024B - Virtual size: 868B