16f6a96a6daa76e280b90ae3140080a01b6083eea039cce032969e290b6dfeba

Sharing

Copy URL Twitter E-mail

General

Target

16f6a96a6daa76e280b90ae3140080a01b6083eea039cce032969e290b6dfeba
Size

484KB
MD5

8d6e2bf7fd8c7c287ceec093a29a3c80
SHA1

058d01028156e12aa6d3d0e8b61205d8781a7d5e
SHA256

16f6a96a6daa76e280b90ae3140080a01b6083eea039cce032969e290b6dfeba
SHA512

7f59e6aea1a3364f5a1d3116b2f7ef702fedb82e0cf11a7d529afcddf8978afc0a1653d9079666c9868ebd134ced4a5423eb8b2496b75a30b0351c060e564bbd
SSDEEP

12288:N+1purelbtNT/XeazheSmVd0UGcExGEUbvuEzTX:8v/rmazheSmVd6UEUbWyX

Score

N/A

Malware Config

Signatures

Files

16f6a96a6daa76e280b90ae3140080a01b6083eea039cce032969e290b6dfeba
.dll windows x86

b7c87eee713cc0c3eb7f38e9e18ae66f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
DeregisterEventSource
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AllocateLocallyUniqueId
RegSetValueExA
RegQueryValueExA
RegCloseKey
GetLengthSid
InitializeAcl
AddAccessDeniedAce
AddAccessAllowedAce

kernel32

GetVersionExA
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
CreateFileMappingA
HeapReAlloc
HeapAlloc
OutputDebugStringA
lstrlenA
SearchPathA
GetDriveTypeA
GetFullPathNameA
ExpandEnvironmentStringsA
lstrcpynA
IsBadCodePtr
WaitForSingleObject
WideCharToMultiByte
GetCPInfo
SetLastError
MultiByteToWideChar
FindResourceA
LockResource
FreeResource
InterlockedIncrement
LoadResource
SizeofResource
OpenFile
LoadLibraryA
GetModuleFileNameA
OpenFileMappingA
LocalAlloc
LocalFree
GetComputerNameA
GlobalMemoryStatus
GetDiskFreeSpaceA
GetVersionExW
DeviceIoControl
GetSystemDirectoryA
CreateFileA
MoveFileExA
LocalLock
LocalUnlock
GetModuleHandleA
VerLanguageNameW
GetSystemDefaultLCID
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetDateFormatA
GetTimeFormatA
GetCurrencyFormatA
GetNumberFormatA
InterlockedExchange
HeapSize
GetLocaleInfoA
MapViewOfFile
GetACP
IsDBCSLeadByteEx
SetUnhandledExceptionFilter
UnmapViewOfFile
CloseHandle
GetOEMCP
SetFilePointer
WriteFile
GetProcessHeap
HeapFree
SetEvent
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
GetLastError
SetErrorMode
GetUserDefaultLCID
GetTimeZoneInformation
GetCurrentProcessId
Sleep
GetTickCount
GetCurrentThreadId
GetFileSize
ReadFile

msvcrt

_adjust_fdiv
_initterm
towlower
towupper
ctime
_wcslwr
_stricmp
_wtoi
qsort
wcscspn
wcsncat
_wcsupr
memmove
_wmakepath
wcsstr
wcschr
_gcvt
modf
time
localtime
_ultoa
_ftol
_ecvt
strchr
_strrev
_wtol
iswctype
_ltow
wcsncmp
_itow
_wcsnicmp
_itoa
_ltoa
atoi
_errno
strerror
_snprintf
_ismbcspace
_except_handler3
atol
isalpha
strstr
_strnicmp
malloc
free
_snwprintf
wcsncpy
strncmp
sprintf
strncpy
_ultow
_wsplitpath
wcscmp
wcscpy
wcsrchr
wcscat
swprintf
_wcsicmp
wcslen

netapi32

Netbios

oleaut32

VarR8FromStr

sqlunirl

_GetWindowText@12
_PostMessage@16
_SetWindowLong@12
_GetSaveFileName@4
_GetWindowTextLength@4
_GetDlgItemText@16
_SetDlgItemText@12
_SendDlgItemMessage@20
_GetWindowLong@8
_LoadCursor@8
_MAKEINTRESOURCE@4
_GetUnicodeRedirectionLayer@0
_MessageBox@16
_GetUserName@8
_GetComputerName@8
_CreateFile@28
_LoadLibrary@4
_GetModuleFileName@12
_LoadString@16
_FindResource@12
_SendMessage@16
_SetWindowText@8

user32

ReleaseCapture
GetDesktopWindow
SetCapture
SetFocus
CheckDlgButton
ShowWindow
GetDlgItem
EnableWindow
IsDlgButtonChecked
MoveWindow
GetSystemMetrics
IsWindowVisible
GetWindowRect
GetParent
EndDialog
UpdateWindow
PostMessageA
IsWindowEnabled
CharToOemBuffA
OemToCharBuffA
MessageBoxA
wsprintfA
CharToOemA
LoadStringA
SetCursor

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

BCP_batch
BCP_bind
BCP_colfmt
BCP_collen
BCP_colptr
BCP_columns
BCP_control
BCP_done
BCP_exec
BCP_getcolfmt
BCP_init
BCP_moretext
BCP_readfmt
BCP_sendrow
BCP_setcolfmt
BCP_writefmt
ConfigDSNW
ConfigDriverW
ConnectDlgProc
FinishDlgProc
LibMain
SQLAllocHandle
SQLBindCol
SQLBindParameter
SQLBrowseConnectW
SQLBulkOperations
SQLCancel
SQLCloseCursor
SQLColAttributeW
SQLColumnPrivilegesW
SQLColumnsW
SQLConnectW
SQLCopyDesc
SQLDebug
SQLDescribeColW
SQLDescribeParam
SQLDisconnect
SQLDriverConnectW
SQLEndTran
SQLExecDirectW
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLForeignKeysW
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttrW
SQLGetConnectOptionW
SQLGetCursorNameW
SQLGetData
SQLGetDescFieldW
SQLGetDescRecW
SQLGetDiagFieldW
SQLGetDiagRecW
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfoW
SQLGetStmtAttrW
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSqlW
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepareW
SQLPrimaryKeysW
SQLProcedureColumnsW
SQLProceduresW
SQLPutData
SQLRowCount
SQLSetConnectAttrW
SQLSetConnectOptionW
SQLSetCursorNameW
SQLSetDescFieldW
SQLSetDescRec
SQLSetEnvAttr
SQLSetPos
SQLSetScrollOptions
SQLSetStmtAttrW
SQLSpecialColumnsW
SQLStatisticsW
SQLTablePrivilegesW
SQLTablesW
TestDlgProc
WizDSNDlgProc
WizDatabaseDlgProc
WizIntSecurityDlgProc
WizLanguageDlgProc

Sections

.text
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7c87eee713cc0c3eb7f38e9e18ae66f

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

netapi32

oleaut32

sqlunirl

user32

version

Exports

Exports

Sections

.text Size: 388KB - Virtual size: 387KB

.data Size: 20KB - Virtual size: 17KB

.sdbid Size: 56KB - Virtual size: 52KB

.rsrc Size: 4KB - Virtual size: 976B

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 388KB - Virtual size: 387KB

.data
Size: 20KB - Virtual size: 17KB

.sdbid
Size: 56KB - Virtual size: 52KB

.rsrc
Size: 4KB - Virtual size: 976B

.reloc
Size: 12KB - Virtual size: 10KB