a6152196b93648a549745924774da38fa1ee3c2fe4d29b250baf2404948cc375

Sharing

Copy URL Twitter E-mail

General

Target

a6152196b93648a549745924774da38fa1ee3c2fe4d29b250baf2404948cc375
Size

108KB
MD5

ea59a24a3c8ef9bae73530668d7bb0ac
SHA1

01bbb936ec29910d33783b9d404f8903f940d32c
SHA256

a6152196b93648a549745924774da38fa1ee3c2fe4d29b250baf2404948cc375
SHA512

58ed65a05b5dd336326f2d4e28e3c4b116723e15391aa54618af6990ab64c028fadef79f9122988c2b4aed7b468a1c82edb8985258cc8d98a05f4796db2c5612
SSDEEP

3072:CE3NGADOmGzhG9pTeqLG0k37+khOZl9ZXW51HQTA7Glk:CE3FObuZLEykhSXs1HJ77

Score

N/A

Malware Config

Signatures

Files

a6152196b93648a549745924774da38fa1ee3c2fe4d29b250baf2404948cc375
.exe windows x86

042bea692148240cc1010fff3aa1987e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
floor
ceil
atof
atoi
sscanf
strlen
sprintf
strcpy
malloc
_strdup
free
realloc
strncmp
strspn
strncpy
strtoul
isdigit
strncat
fflush
__p__iob
exit
getenv
fopen
fgets
isspace
strchr
fclose
isalpha
feof
time
fwrite
memmove
_errno
isalnum
strstr
isupper
tolower
islower
toupper
strtol
_unlink
strerror
_stat
_rmdir
isxdigit

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
SetCommTimeouts
WideCharToMultiByte
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
HeapReAlloc
CreateFileA
ReadFile
InterlockedExchange
FormatMessageA
LoadLibraryExA
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileExA
GetLastError
CreateDirectoryA
MultiByteToWideChar
DeviceIoControl
LocalFree
RemoveDirectoryA
GetFileAttributesExA
SleepEx
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose

user32

GetForegroundWindow

advapi32

GetUserNameA

secur32

FreeCredentialsHandle
DeleteSecurityContext
InitializeSecurityContextA
FreeContextBuffer
AcquireCredentialsHandleA

wsock32

WSAStartup
WSACleanup
setsockopt
WSAGetLastError
closesocket
socket
connect
htonl
send
WSASetLastError
recv
getsockopt
getsockname
ntohl
ntohs
select
htons
ioctlsocket
inet_ntoa
gethostbyname

shfolder

SHGetFolderPathA

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

042bea692148240cc1010fff3aa1987e

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

secur32

wsock32

shfolder

odbc32

Sections

.code Size: 9KB - Virtual size: 9KB

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 16KB

.code
Size: 9KB - Virtual size: 9KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 16KB