845494d52e58d3a4d78344005ac610c3c01387e32c8f91a2c02bb9c12ce94bb4

Sharing

Copy URL Twitter E-mail

General

Target

845494d52e58d3a4d78344005ac610c3c01387e32c8f91a2c02bb9c12ce94bb4
Size

74KB
MD5

eac57b11538483dac8d0ec3a8cca82e1
SHA1

13a6dc19a70ae5dc986087b31d6aec4023624c2b
SHA256

845494d52e58d3a4d78344005ac610c3c01387e32c8f91a2c02bb9c12ce94bb4
SHA512

9db2e04e7f7ae0f4ce73a08c3484d97e06dbe65f03f4a024bf8ce0480dc0cca59873acd4bfc525906a1e095453e236a298b907c6f5a97874db45e61178bd251c
SSDEEP

1536:T3XWh+wvPn1iEp08fypOApyFw6/mYyRcvzVxApfT56u/r47OapkJc3YJv+:T3XO+GVypOMomYyIfqT5/r4sIY9+

Score

N/A

Malware Config

Signatures

Files

845494d52e58d3a4d78344005ac610c3c01387e32c8f91a2c02bb9c12ce94bb4
.exe windows x86

26854dc4fa3832833c101c621df77c7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIpow
fseek
ftell
fread
sprintf
fabs
ceil
malloc
floor
free
fclose
strncpy
atoi
_strnicmp
localtime
mktime
strlen
strcpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
FreeLibrary
LoadLibraryA
HeapAlloc
HeapFree
InitializeCriticalSection
TlsAlloc
GetVersionExA
GetLocalTime
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
CreateFileA
ReadFile
CloseHandle

user32

GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
UnregisterClassA
DestroyAcceleratorTable
LoadCursorA
DestroyIcon
FillRect

gdi32

GetStockObject
DeleteObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

comdlg32

ChooseColorA

comctl32

InitCommonControlsEx

ole32

CoInitialize
RevokeDragDrop

winmm

timeEndPeriod

odbc32

SQLGetDiagField
SQLDescribeCol
SQLSetStmtAttr
SQLExecDirect
SQLAllocHandle
SQLPrepare
SQLBindParameter
SQLExecute
SQLFreeHandle
SQLGetData
SQLConnect
SQLDisconnect
SQLDriverConnect
SQLSetEnvAttr
SQLNumResultCols
SQLFetchScroll
SQLFetch

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

26854dc4fa3832833c101c621df77c7c

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

winmm

odbc32

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 14KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 14KB