c825ae7b32632b3376f883c006e3d46e3c57cead25288f893bf327ba013765a0

Sharing

Copy URL Twitter E-mail

General

Target

c825ae7b32632b3376f883c006e3d46e3c57cead25288f893bf327ba013765a0
Size

820KB
MD5

b880d908c780c8eeab07daaf39b631a7
SHA1

9b46489a279e86001fdcfdfaa8555897dd8d579b
SHA256

c825ae7b32632b3376f883c006e3d46e3c57cead25288f893bf327ba013765a0
SHA512

7f1294dd07d15c2c27a64fb97e13fcebb0fe0aae817b09d924121a8137c36f2ae4261da3cfd78cbc4ce26d691af328649e1738076f028a78427344e8f6723ab6
SSDEEP

24576:/10eJDgRgBnMO/Gz+9M5VypLHHskHbPkr1T5xf:9jRVBMVzpyMT

Score

N/A

Malware Config

Signatures

Files

c825ae7b32632b3376f883c006e3d46e3c57cead25288f893bf327ba013765a0
.exe windows x86

4355b1c0c2251da52c1f4f27963a2fe1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoFreeAllLibraries
StgOpenStorageOnILockBytes
MonikerCommonPrefixWith
CoGetClassVersion
CoQueryReleaseObject
HDC_UserMarshal
CoReleaseMarshalData
IsValidPtrOut
CoGetInterfaceAndReleaseStream
DllDebugObjectRPCHook
CoInitializeSecurity
OleCreateLinkFromData
CoQueryClientBlanket

msorcl32

SQLStatistics
SQLGetData
SQLProcedures
SQLAllocEnv
SQLForeignKeys
SQLPutData
SQLExtendedFetch
SQLGetConnectOption
SQLDisconnect
SQLSetPos
SQLDescribeParam
SQLTables
SQLFreeStmt
SQLSetScrollOptions
SQLSetConnectOption
DllUnregisterServer
SQLAllocConnect
SQLBindCol
DllRegisterServer
SQLConnect
SQLExecDirect
SQLSetCursorName

rasman

RasSetCalledIdInfo
RasRpcDisconnectServer
RasRpcPortGetInfo
RasRpcPortEnum
RasSecurityDialogReceive
RasGetUserCredentials
RasPortSetInfo
RasSetDialParams

kernel32

GetConsoleCP
EndUpdateResourceW
GetWindowsDirectoryA
WriteConsoleOutputW
WritePrivateProfileStringA
GetCommConfig
InterlockedExchange
GetProcAddress
GetOEMCP
RemoveDirectoryW
CreateWaitableTimerA
AddAtomA
FormatMessageW
PostQueuedCompletionStatus
CreateDirectoryExW
LoadLibraryW
IsBadHugeReadPtr
HeapCreate
VerLanguageNameW

dnsapi

Dns_SetRecordDatalength
DnsAcquireContextHandle_W
DnsApiAlloc
DnsNameCompare_W
Dns_FindAuthoritativeZoneLib
DnsRecordStringForWritableType
Dns_GetRandomXid
DnsNameCompareEx_W
QueryDirectEx
DnsGetDomainName
DnsNameCompare_UTF8
DnsDhcpSrvRegisterHostName
DnsRecordSetDetach

Sections

.text
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4355b1c0c2251da52c1f4f27963a2fe1

Headers

DLL Characteristics

File Characteristics

Imports

ole32

msorcl32

rasman

kernel32

dnsapi

Sections

.text Size: 403KB - Virtual size: 402KB

.rdata Size: 81KB - Virtual size: 81KB

.data Size: 173KB - Virtual size: 1.6MB

.rsrc Size: 160KB - Virtual size: 160KB

.reloc Size: 1024B - Virtual size: 832B

.text
Size: 403KB - Virtual size: 402KB

.rdata
Size: 81KB - Virtual size: 81KB

.data
Size: 173KB - Virtual size: 1.6MB

.rsrc
Size: 160KB - Virtual size: 160KB

.reloc
Size: 1024B - Virtual size: 832B