bcfa128059e1e055cd3ddecf8f0cda6756707bc9896d056a3d466575a94d5f34

Sharing

Copy URL Twitter E-mail

General

Target

bcfa128059e1e055cd3ddecf8f0cda6756707bc9896d056a3d466575a94d5f34
Size

41KB
MD5

3774f731e00ae35586c7e811928b3edc
SHA1

10656da91e3795c40b749e5cbc70e3a72c2063af
SHA256

bcfa128059e1e055cd3ddecf8f0cda6756707bc9896d056a3d466575a94d5f34
SHA512

5adccb4833907097c824eb864abeaed28668ae5432e362573ba7c0a4b924e26f6eac79c6c46e58e21229fc6fd533edf10790f0cac389cdbcc166378cc3cd6113
SSDEEP

768:FwTx4koUTrYE5o94V/Yp1Kzh2+6ddb29p171HmYhTXn1i1:FeaFU/YJOh2hdEvN1HmYhTX1i1

Score

N/A

Malware Config

Signatures

Files

bcfa128059e1e055cd3ddecf8f0cda6756707bc9896d056a3d466575a94d5f34
.exe windows x86

173ca97e844c019be24b59389de73738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt20

??_Gios@@UAEPAXI@Z
??_Distream@@QAEXXZ
_tempnam
_wexeclp
?open@filebuf@@QAEPAV1@PBDHH@Z
??0streambuf@@QAE@ABV0@@Z
_nextafter
?write@ostream@@QAEAAV1@PBEH@Z
putc
_tcschr
fputs
memset
_tcslwr
__p___initenv
_mbctoupper
_strdup
putchar
?tellp@ostream@@QAEJXZ
_ismbclegal
?dbp@streambuf@@QAEXXZ
_close
_ismbcl0
setlocale

msrating

RatingCustomInit
RatingCustomSetUserOptions
RatingCheckUserAccess
RatingEnabledQuery
RatingCustomSetDefaultBureau
RatingAddPropertyPages
RatingFreeDetails
RatingSetupUI
RatingEnable
RatingCustomAddRatingHelper
RatingCustomAddRatingSystem
ClickedOnPRF
RatingAccessDeniedDialog
RatingCustomRemoveRatingHelper
RatingObtainQuery
VerifySupervisorPassword
RatingAccessDeniedDialog2
RatingInit
RatingObtainCancel
RatingCustomCrackData
ClickedOnRAT

odbcjt32

ConfigDSNExW
SQLProcedureColumnsW
SQLFetch
SQLAllocStmt
SQLFreeHandle
SQLSetEnvAttr
SQLCopyDesc
SQLBindParameter
SQLCloseCursor
SQLNumParams
SQLExtendedFetch
SQLGetData
ConfigDialogProc
LoadByOrdinal
SQLPutData
SQLStatisticsW
SQLGetCursorNameW
SQLSetCursorNameW
SQLSetScrollOptions
SQLPrepareW
SQLBindCol
SQLDriverConnectW
SQLDescribeColW
SQLAllocHandle
SQLColAttributeW
InitializeLoginDialog
InitDialogAgain
SQLRowCount

kernel32

EnumLanguageGroupLocalesW
RegisterWaitForInputIdle
IsValidLocale
GetBinaryTypeA
CopyFileExA
GetProcessHeap
RemoveDirectoryW
WriteConsoleOutputW
GetConsoleAliasExesA
_lread
LoadLibraryA
EnumUILanguagesW
RtlUnwind
SetConsoleCursorPosition
ReplaceFile
GetCommProperties
CreateMemoryResourceNotification
FindResourceExW
IsBadCodePtr
UnlockFileEx
PeekConsoleInputA
DosPathToSessionPathW
FreeEnvironmentStringsW
SetTapeParameters
VirtualAlloc
GetFileTime
GetModuleHandleA
DeleteFiber
SetComputerNameA
LocalHandle
GetProcessIoCounters
IsBadStringPtrA
GlobalCompact

ntdll

RtlGetNtVersionNumbers
strcmp
strncmp
ZwResetEvent
ZwAccessCheck
RtlCreateTimerQueue
ZwOpenThreadToken
ZwFlushVirtualMemory
PfxFindPrefix
ZwQuerySystemEnvironmentValue
ZwSetTimer
RtlUnicodeStringToOemString
RtlGetCurrentPeb
LdrVerifyImageMatchesChecksum
RtlSetInformationAcl
RtlRemoveVectoredExceptionHandler
RtlCopyUnicodeString
RtlFindLongestRunClear
ZwQueryQuotaInformationFile
RtlCreateActivationContext
RtlCreateEnvironment
NtSetInformationKey
RtlImageRvaToSection

comctl32

ImageList_Create
ImageList_Remove
ImageList_Merge
CreateStatusWindow
PropertySheetW
_TrackMouseEvent
ImageList_BeginDrag
ImageList_Duplicate
PropertySheetA
GetMUILanguage
ImageList_DragEnter
ImageList_SetDragCursorImage
ImageList_Read
ImageList_Replace
ImageList_DragLeave
CreateStatusWindowA
LBItemFromPt
InitializeFlatSB
ImageList_SetOverlayImage
DestroyPropertySheetPage

Sections

.text
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

173ca97e844c019be24b59389de73738

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt20

msrating

odbcjt32

kernel32

ntdll

comctl32

Sections

.text Size: 1024B - Virtual size: 618B

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 17KB - Virtual size: 60KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 1024B - Virtual size: 618B

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 17KB - Virtual size: 60KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 64B