d38ceefb4686f0f5a53feecefd2261e1339e10559b4dd0cb22abcc878f6147d7

Sharing

Copy URL Twitter E-mail

General

Target

d38ceefb4686f0f5a53feecefd2261e1339e10559b4dd0cb22abcc878f6147d7
Size

604KB
MD5

6fd50fee3c9a0c3d29383dfea7a19e20
SHA1

b3ac8868a6cfd79a867fa35df44f55616620d01a
SHA256

d38ceefb4686f0f5a53feecefd2261e1339e10559b4dd0cb22abcc878f6147d7
SHA512

cd5ddcee52ff6c8c2acab7438a7c6d70cf92c38fae60fed2cb7726fee473ecf591eca5b119524043041d49d4a6755baea8e6aa21626fbe06334c744116021def
SSDEEP

12288:Uqp64f2eIGLLto5vga7x8uuRz3IuZB4bcNpVaI6CcmP5BS46ZDeVyLnFnYm69H/s:Jp64eeIGnYvga7xp83IuZB4QXVaI6CcN

Score

N/A

Malware Config

Signatures

Files

d38ceefb4686f0f5a53feecefd2261e1339e10559b4dd0cb22abcc878f6147d7
.dll windows x86

b7c87eee713cc0c3eb7f38e9e18ae66f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
DeregisterEventSource
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AllocateLocallyUniqueId
RegSetValueExA
RegQueryValueExA
RegCloseKey
GetLengthSid
InitializeAcl
AddAccessDeniedAce
AddAccessAllowedAce

kernel32

GetVersionExA
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
CreateFileMappingA
HeapReAlloc
HeapAlloc
OutputDebugStringA
lstrlenA
SearchPathA
GetDriveTypeA
GetFullPathNameA
ExpandEnvironmentStringsA
lstrcpynA
IsBadCodePtr
WaitForSingleObject
WideCharToMultiByte
GetCPInfo
SetLastError
MultiByteToWideChar
FindResourceA
LockResource
FreeResource
InterlockedIncrement
LoadResource
SizeofResource
OpenFile
LoadLibraryA
GetModuleFileNameA
OpenFileMappingA
LocalAlloc
LocalFree
GetComputerNameA
GlobalMemoryStatus
GetDiskFreeSpaceA
GetVersionExW
DeviceIoControl
GetSystemDirectoryA
CreateFileA
MoveFileExA
LocalLock
LocalUnlock
GetModuleHandleA
VerLanguageNameW
GetSystemDefaultLCID
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetDateFormatA
GetTimeFormatA
GetCurrencyFormatA
GetNumberFormatA
InterlockedExchange
HeapSize
GetLocaleInfoA
MapViewOfFile
GetACP
IsDBCSLeadByteEx
SetUnhandledExceptionFilter
UnmapViewOfFile
CloseHandle
GetOEMCP
SetFilePointer
WriteFile
GetProcessHeap
HeapFree
SetEvent
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
GetLastError
SetErrorMode
GetUserDefaultLCID
GetTimeZoneInformation
GetCurrentProcessId
Sleep
GetTickCount
GetCurrentThreadId
GetFileSize
ReadFile

msvcrt

_adjust_fdiv
_initterm
towlower
towupper
ctime
_wcslwr
_stricmp
_wtoi
qsort
wcscspn
wcsncat
_wcsupr
memmove
_wmakepath
wcsstr
wcschr
_gcvt
modf
time
localtime
_ultoa
_ftol
_ecvt
strchr
_strrev
_wtol
iswctype
_ltow
wcsncmp
_itow
_wcsnicmp
_itoa
_ltoa
atoi
_errno
strerror
_snprintf
_ismbcspace
_except_handler3
atol
isalpha
strstr
_strnicmp
malloc
free
_snwprintf
wcsncpy
strncmp
sprintf
strncpy
_ultow
_wsplitpath
wcscmp
wcscpy
wcsrchr
wcscat
swprintf
_wcsicmp
wcslen

netapi32

Netbios

oleaut32

VarR8FromStr

sqlunirl

_GetWindowText@12
_PostMessage@16
_SetWindowLong@12
_GetSaveFileName@4
_GetWindowTextLength@4
_GetDlgItemText@16
_SetDlgItemText@12
_SendDlgItemMessage@20
_GetWindowLong@8
_LoadCursor@8
_MAKEINTRESOURCE@4
_GetUnicodeRedirectionLayer@0
_MessageBox@16
_GetUserName@8
_GetComputerName@8
_CreateFile@28
_LoadLibrary@4
_GetModuleFileName@12
_LoadString@16
_FindResource@12
_SendMessage@16
_SetWindowText@8

user32

ReleaseCapture
GetDesktopWindow
SetCapture
SetFocus
CheckDlgButton
ShowWindow
GetDlgItem
EnableWindow
IsDlgButtonChecked
MoveWindow
GetSystemMetrics
IsWindowVisible
GetWindowRect
GetParent
EndDialog
UpdateWindow
PostMessageA
IsWindowEnabled
CharToOemBuffA
OemToCharBuffA
MessageBoxA
wsprintfA
CharToOemA
LoadStringA
SetCursor

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

BCP_batch
BCP_bind
BCP_colfmt
BCP_collen
BCP_colptr
BCP_columns
BCP_control
BCP_done
BCP_exec
BCP_getcolfmt
BCP_init
BCP_moretext
BCP_readfmt
BCP_sendrow
BCP_setcolfmt
BCP_writefmt
ConfigDSNW
ConfigDriverW
ConnectDlgProc
FinishDlgProc
LibMain
SQLAllocHandle
SQLBindCol
SQLBindParameter
SQLBrowseConnectW
SQLBulkOperations
SQLCancel
SQLCloseCursor
SQLColAttributeW
SQLColumnPrivilegesW
SQLColumnsW
SQLConnectW
SQLCopyDesc
SQLDebug
SQLDescribeColW
SQLDescribeParam
SQLDisconnect
SQLDriverConnectW
SQLEndTran
SQLExecDirectW
SQLExecute
SQLExtendedFetch
SQLFetch
SQLFetchScroll
SQLForeignKeysW
SQLFreeHandle
SQLFreeStmt
SQLGetConnectAttrW
SQLGetConnectOptionW
SQLGetCursorNameW
SQLGetData
SQLGetDescFieldW
SQLGetDescRecW
SQLGetDiagFieldW
SQLGetDiagRecW
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfoW
SQLGetStmtAttrW
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSqlW
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepareW
SQLPrimaryKeysW
SQLProcedureColumnsW
SQLProceduresW
SQLPutData
SQLRowCount
SQLSetConnectAttrW
SQLSetConnectOptionW
SQLSetCursorNameW
SQLSetDescFieldW
SQLSetDescRec
SQLSetEnvAttr
SQLSetPos
SQLSetScrollOptions
SQLSetStmtAttrW
SQLSpecialColumnsW
SQLStatisticsW
SQLTablePrivilegesW
SQLTablesW
TestDlgProc
WizDSNDlgProc
WizDatabaseDlgProc
WizIntSecurityDlgProc
WizLanguageDlgProc

Sections

.text
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7c87eee713cc0c3eb7f38e9e18ae66f

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

netapi32

oleaut32

sqlunirl

user32

version

Exports

Exports

Sections

.text Size: 388KB - Virtual size: 387KB

.data Size: 20KB - Virtual size: 17KB

.sdbid Size: 176KB - Virtual size: 172KB

.rsrc Size: 4KB - Virtual size: 976B

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 388KB - Virtual size: 387KB

.data
Size: 20KB - Virtual size: 17KB

.sdbid
Size: 176KB - Virtual size: 172KB

.rsrc
Size: 4KB - Virtual size: 976B

.reloc
Size: 12KB - Virtual size: 10KB