f0c9160e616f58289bf5cc2bb2959d0b526a14ce7d1c08eff683b2feb684cef0

Sharing

Copy URL Twitter E-mail

General

Target

f0c9160e616f58289bf5cc2bb2959d0b526a14ce7d1c08eff683b2feb684cef0
Size

45KB
MD5

9ac2b7c32e94b18d403c74837eb92498
SHA1

a0d25e372a0bf40b91ed31a3255be5c8aa866518
SHA256

f0c9160e616f58289bf5cc2bb2959d0b526a14ce7d1c08eff683b2feb684cef0
SHA512

522a8fa36e438013c646c3b679f47c30b1742d58e1780defabe58e9b52b41da133cece4c81d6cb5721656cb4adee35a6768930ccb384470aa89265bcc2b3bf6f
SSDEEP

768:mV868R8Z8s888m8E8Qvl7ICYwAMnZY00znqSxAXRSjU5h5TrYsrpqLgFLgXvZDMI:mVzq+5hRpfvl7ICYwAMZY00TR+CU5h5w

Score

N/A

Malware Config

Signatures

Files

f0c9160e616f58289bf5cc2bb2959d0b526a14ce7d1c08eff683b2feb684cef0
.exe windows x86

ad36e47e9ef6b36251935fd2240c4f50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIpow
strlen
strcpy
fseek
ftell
fread
sprintf
strncpy
atoi
_strnicmp
localtime
mktime
fabs
ceil
malloc
floor
free
fclose

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
CreateFileA
ReadFile
CloseHandle
InitializeCriticalSection
GetLocalTime
TlsAlloc
GetVersionExA
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep

user32

GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
UnregisterClassA
DestroyAcceleratorTable
LoadCursorA
DestroyIcon
FillRect

gdi32

GetStockObject
DeleteObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

comdlg32

ChooseColorA

comctl32

InitCommonControlsEx

ole32

CoInitialize
RevokeDragDrop

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

winmm

timeEndPeriod

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ad36e47e9ef6b36251935fd2240c4f50

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

odbc32

winmm

Sections

.code Size: 9KB - Virtual size: 9KB

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 14KB

.code
Size: 9KB - Virtual size: 9KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 14KB