abarrotes 123[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

abarrotes 123.rar
Size

22.0MB
MD5

77cf0ece579ed8bd5563ab9cad8af4c6
SHA1

2eb2e49c6ed5ba9bf4310c90e561fea37d25c6cb
SHA256

f8707bd803d100049faa2f71ecfccd18424f496ffde0fc38ec36cea1eee73cfd
SHA512

5bcf88b3d810ecef35149c56bf63edbb5814c8b7de46153e74594115b44b5d88852445834b2d5c585e0fa6e1b09ede441d5727459342d89e1a195d65ba3a7208
SSDEEP

393216:R3wNOkJnTdYjpbCOzOzr9Xh5hWt7bae5ShZMKBqL9cuGV4NI3iEN10vnc+:RgccTdYjpNSlXhTWBbQ+LulVKI3iU0E+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/instalador/crack/gds32.dll

Files

abarrotes 123.rar
.rar
televentas aqui/eleventa.rar
.rar
instalador/Instrucciones.txt
instalador/crack/gds32.dll
.dll windows x86

0dc89df673f9b19695c5cc3bf97fca5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

shutdown
WSAStartup
WSACleanup
inet_addr
ntohl
htonl
WSAGetLastError
send
setsockopt
getpeername
connect
socket
accept
listen
getsockname
getservbyname
bind
htons
closesocket
gethostname
getsockopt
__WSAFDIsSet
select
recv
gethostbyname

kernel32

GetCurrentThread
GetComputerNameA
SetThreadPriority
GetCurrentThreadId
GetTempPathA
GetVersionExA
GetFullPathNameA
GetSystemInfo
InterlockedExchangeAdd
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
GetLastError
TlsGetValue
TlsSetValue
TlsFree
VirtualAlloc
VirtualFree
GetModuleFileNameA
SleepEx
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
Sleep
DisconnectNamedPipe
FlushFileBuffers
ReadFile
WriteFile
WaitNamedPipeA
CreateFileA
ConnectNamedPipe
GetDriveTypeA
GetCurrentProcessId
UnmapViewOfFile
OpenEventA
CreateEventA
SetEvent
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
OpenMutexA
WaitForSingleObject
ResumeThread
CreateMutexA
OpenProcess
ReleaseMutex
FormatMessageA
GetUserDefaultLangID
SetFilePointer
GetCurrentDirectoryA
ResetEvent
WaitForMultipleObjects
SetEndOfFile
ReleaseSemaphore
CreateSemaphoreA
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcmpA
lstrlenA
LocalFree
LocalAlloc
GetEnvironmentVariableA
FindNextFileA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
InitializeCriticalSection
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
FlushViewOfFile
GetFileSize
SuspendThread
GetFileInformationByHandle
GetStdHandle
DeleteFileA
SetTapePosition
GetTapeParameters
ExitProcess
FreeLibrary
LoadLibraryExA
CreateNamedPipeA
GetTickCount
QueryPerformanceCounter

advapi32

CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA
CryptGenRandom
CryptAcquireContextA

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr71

_stricmp
strtok
_fullpath
_errno
_sopen
_ftime
vfprintf
ctime
strerror
_beginthreadex
getenv
strrchr
isalpha
exit
_strdup
fgetc
system
sscanf
free
signal
_except_handler3
ftell
fseek
putc
_setmaxstdio
isdigit
strncmp
sqrt
vsprintf
tolower
??1type_info@@UAE@XZ
__security_error_handler
printf
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
_iob
fputs
fputc
fflush
strncpy
??8type_info@@QBEHABV0@@Z
__RTDynamicCast
?name@type_info@@QBEPBDXZ
??0exception@@QAE@XZ
_purecall
atol
_open_osfhandle
malloc
_getcwd
atoi
time
_snprintf
strstr
clock
sprintf
strchr
__CxxFrameHandler
fopen
fclose
fprintf
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
memmove
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
abort
_access
getc
__dllonexit
_vsnprintf
_getpid
_close
_dup2
_strnicmp
_read
_open
_fdopen
_umask
_lseek
_unlink
_stat
_mktemp
_strlwr
_write
_fileno
_isatty
strncat
getchar
perror
rename
localtime
__RTtypeid
fgets

mpr

WNetCloseEnum
WNetEnumResourceA
WNetOpenEnumA
WNetGetUniversalNameA

icuuc30

u_toupper_3_0
u_tolower_3_0
u_strCompare_3_0
u_countChar32_3_0
ucnv_open_3_0
ucnv_fromUChars_3_0
ucnv_close_3_0
utf8_nextCharSafeBody_3_0

icuin30

ucol_strcoll_3_0
ucol_open_3_0
ucol_close_3_0
ucol_setAttribute_3_0
ucol_getSortKey_3_0

user32

MessageBoxA
CharUpperBuffA
CharLowerBuffA

ole32

CoCreateGuid

Exports

Exports

BLOB_close
BLOB_display
BLOB_dump
BLOB_edit
BLOB_get
BLOB_load
BLOB_open
BLOB_put
BLOB_text_dump
BLOB_text_load
Bopen
CVT_move
KEYWORD_getTokens
KEYWORD_stringIsAToken
_isc_event_block
_isc_expand_dpb
_isc_start_transaction
fb_interpret
gds__alloc
gds__alloc_debug
gds__attach_database
gds__blob_info
gds__blob_size
gds__cancel_blob
gds__cancel_events
gds__close
gds__close_blob
gds__commit_retaining
gds__commit_transaction
gds__compile_request
gds__compile_request2
gds__create_blob
gds__create_blob2
gds__create_database
gds__database_cleanup
gds__database_info
gds__ddl
gds__declare
gds__decode
gds__decode_date
gds__default_printer
gds__describe
gds__describe_bind
gds__detach_database
gds__disable_subsystem
gds__dsql_finish
gds__edit
gds__enable_subsystem
gds__encode
gds__encode_date
gds__event_block
gds__event_counts
gds__event_wait
gds__execute
gds__execute_immediate
gds__fetch
gds__free
gds__ftof
gds__get_prefix
gds__get_segment
gds__get_slice
gds__interprete
gds__log
gds__log_status
gds__map_blobs
gds__msg_close
gds__msg_format
gds__msg_lookup
gds__msg_open
gds__msg_put
gds__open
gds__open_blob
gds__open_blob2
gds__parse_bpb
gds__prefix
gds__prefix_lock
gds__prefix_msg
gds__prepare
gds__prepare_transaction
gds__prepare_transaction2
gds__print_blr
gds__print_status
gds__put_error
gds__put_segment
gds__put_slice
gds__qtoq
gds__que_events
gds__receive
gds__reconnect_transaction
gds__register_cleanup
gds__release_request
gds__request_info
gds__rollback_transaction
gds__seek_blob
gds__send
gds__set_debug
gds__sqlcode
gds__start_and_send
gds__start_multiple
gds__start_request
gds__start_transaction
gds__temp_dir
gds__temp_file
gds__thread_enable
gds__thread_enter
gds__thread_exit
gds__thread_start
gds__to_sqlda
gds__transaction_cleanup
gds__transaction_info
gds__unregister_cleanup
gds__unwind_request
gds__validate_lib_path
gds__vax_integer
gds__version
gds__vtof
gds__vtov
gds_alloc_flag_unfreed
gds_alloc_report
isc_add_user
isc_array_gen_sdl
isc_array_get_slice
isc_array_lookup_bounds
isc_array_lookup_desc
isc_array_put_slice
isc_array_set_desc
isc_attach_database
isc_blob_default_desc
isc_blob_gen_bpb
isc_blob_info
isc_blob_lookup_desc
isc_blob_set_desc
isc_cancel_blob
isc_cancel_events
isc_close
isc_close_blob
isc_commit_retaining
isc_commit_transaction
isc_compile_request
isc_compile_request2
isc_create_blob
isc_create_blob2
isc_create_database
isc_database_info
isc_ddl
isc_declare
isc_decode_date
isc_decode_sql_date
isc_decode_sql_time
isc_decode_timestamp
isc_delete_user
isc_describe
isc_describe_bind
isc_detach_database
isc_drop_database
isc_dsql_alloc_statement2
isc_dsql_allocate_statement
isc_dsql_describe
isc_dsql_describe_bind
isc_dsql_exec_immed2
isc_dsql_exec_immed2_m
isc_dsql_exec_immed3_m
isc_dsql_execute
isc_dsql_execute2
isc_dsql_execute2_m
isc_dsql_execute_immediate
isc_dsql_execute_immediate_m
isc_dsql_execute_m
isc_dsql_fetch
isc_dsql_fetch_a
isc_dsql_fetch_m
isc_dsql_finish
isc_dsql_free_statement
isc_dsql_insert
isc_dsql_insert_m
isc_dsql_prepare
isc_dsql_prepare_m
isc_dsql_release
isc_dsql_set_cursor_name
isc_dsql_sql_info
isc_embed_dsql_close
isc_embed_dsql_declare
isc_embed_dsql_describe
isc_embed_dsql_describe_bind
isc_embed_dsql_exec_immed2
isc_embed_dsql_execute
isc_embed_dsql_execute2
isc_embed_dsql_execute_immed
isc_embed_dsql_fetch
isc_embed_dsql_fetch_a
isc_embed_dsql_insert
isc_embed_dsql_open
isc_embed_dsql_open2
isc_embed_dsql_prepare
isc_embed_dsql_release
isc_encode_date
isc_encode_sql_date
isc_encode_sql_time
isc_encode_timestamp
isc_event_block
isc_event_counts
isc_execute
isc_execute_immediate
isc_expand_dpb
isc_fetch
isc_fetch_a
isc_free
isc_ftof
isc_get_client_major_version
isc_get_client_minor_version
isc_get_client_version
isc_get_segment
isc_get_slice
isc_interprete
isc_modify_dpb
isc_modify_user
isc_open
isc_open_blob
isc_open_blob2
isc_portable_integer
isc_prepare
isc_prepare_transaction
isc_prepare_transaction2
isc_print_blr
isc_print_sqlerror
isc_print_status
isc_put_segment
isc_put_slice
isc_qtoq
isc_que_events
isc_receive
isc_reconnect_transaction
isc_release_request
isc_request_info
isc_reset_fpe
isc_rollback_retaining
isc_rollback_transaction
isc_seek_blob
isc_send
isc_service_attach
isc_service_detach
isc_service_query
isc_service_start
isc_set_debug
isc_sql_interprete
isc_sqlcode
isc_start_and_send
isc_start_multiple
isc_start_request
isc_start_transaction
isc_to_sqlda
isc_transact_request
isc_transaction_info
isc_unwind_request
isc_vax_integer
isc_version
isc_vtof
isc_vtov
isc_wait_for_event
perf_format
perf_get_info
perf_report

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
instalador/manual-puntodeventa.doc
televentas aqui/instalarabarrotes.rar
.rar

Sharing

General

Malware Config

Signatures

Files

0dc89df673f9b19695c5cc3bf97fca5f

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

msvcp71

msvcr71

mpr

icuuc30

icuin30

user32

ole32

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 428KB - Virtual size: 424KB

.data Size: 44KB - Virtual size: 88KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 64KB - Virtual size: 63KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 428KB - Virtual size: 424KB

.data
Size: 44KB - Virtual size: 88KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 64KB - Virtual size: 63KB