21a5861e13e25713da6f94c4d46220acf56df8fc071d681e05df02de7a5f49d9

Sharing

Copy URL Twitter E-mail

General

Target

21a5861e13e25713da6f94c4d46220acf56df8fc071d681e05df02de7a5f49d9
Size

1.0MB
MD5

42a1d28c921260fcad5530000a58a38c
SHA1

4c248cc5a56f5c1a093eefc098bd312dc5e9cc4e
SHA256

21a5861e13e25713da6f94c4d46220acf56df8fc071d681e05df02de7a5f49d9
SHA512

50b76eb00e0891d6e55f0e74acd5c0c0265291a4676c5efa720e6cd35442fec7dbcf6ab12b8af90c4043c4b25e4087ca05a60d04449cbbc9f1613b26300127cb
SSDEEP

24576:DS0qZBpA/YmtgKNhRFisJpm+f86pKaPYcoxCRc:SZBb9Ef7Cip9wcS

Score

N/A

Malware Config

Signatures

Files

21a5861e13e25713da6f94c4d46220acf56df8fc071d681e05df02de7a5f49d9
.exe windows x86

dfa8447ee92952f4795fba0271d35290

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

odbc32

VRetrieveDriverErrorsRowCol
CursorLibLockDesc
LockHandle
CursorLibLockDbc
CursorLibTransact
PostODBCError
SearchStatusCode
ValidateErrorQueue
CursorLibLockStmt
PostODBCComponentError
VFreeErrors

netapi32

NetUserGetInfo
NetServerSetInfo
NetShareGetInfo
NetUserEnum
NetServiceControl
NetGroupEnum
NetGetAnyDCName
NetUseDel
NetUserDel
NetFileEnum
NetApiBufferFree
NetShareDelSticky
NetUseEnum
NetUserGetGroups
NetpIsRemote

advapi32

AddAccessAllowedAce
GetSidSubAuthorityCount
RegCreateKeyW
LsaAddAccountRights
CryptAcquireContextA
RegSetValueExA
RevertToSelf
RegSetValueW
LsaLookupNames
RegCreateKeyExW
AbortSystemShutdownA
LsaClose

kernel32

TransactNamedPipe
VirtualAlloc
GetTickCount
GetLargestConsoleWindowSize
FindNextVolumeW
SetCommBreak
GetCommandLineA
InterlockedExchange
SetEnvironmentVariableW
SetErrorMode
CreateNamedPipeW
WritePrivateProfileStringW
SetConsoleScreenBufferSize
Process32First
GetModuleHandleA
FindAtomA

msacm32

acmStreamUnprepareHeader
acmFormatSuggest
acmStreamSize
acmStreamPrepareHeader
acmStreamOpen
acmFormatDetailsW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 163KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 177KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 187KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfa8447ee92952f4795fba0271d35290

Headers

DLL Characteristics

File Characteristics

Imports

odbc32

netapi32

advapi32

kernel32

msacm32

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 204KB - Virtual size: 307KB

.data Size: 130KB - Virtual size: 206KB

.pdata Size: 163KB - Virtual size: 271KB

text Size: 177KB - Virtual size: 227KB

data Size: 187KB - Virtual size: 332KB

.rsrc Size: 141KB - Virtual size: 141KB

.reloc Size: 512B - Virtual size: 232B

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 204KB - Virtual size: 307KB

.data
Size: 130KB - Virtual size: 206KB

.pdata
Size: 163KB - Virtual size: 271KB

text
Size: 177KB - Virtual size: 227KB

data
Size: 187KB - Virtual size: 332KB

.rsrc
Size: 141KB - Virtual size: 141KB

.reloc
Size: 512B - Virtual size: 232B