65d9944de110c964b917dcf67bee97ffa6fe5a8bc8a1a31062cc5f2bec270727

General

Target

65d9944de110c964b917dcf67bee97ffa6fe5a8bc8a1a31062cc5f2bec270727
Size

790KB
MD5

06413433e66c9bcb758f3d628a9c9336
SHA1

dcefccde08098b33f9cd94b4e6aa848ebcb1f530
SHA256

65d9944de110c964b917dcf67bee97ffa6fe5a8bc8a1a31062cc5f2bec270727
SHA512

860514b9b890ccaf37a7796b973004e93f5827ebed65d79b526c387d782d9ebc56a89f7dc6a04772414ec2348e27521135236e55aa15eaaac2d49d55a0ea5d0b
SSDEEP

24576:hLOhfRLTta0Ftx3xqoPIGbAI/2v3FVN446Mliz:hSlRLp/UiIMAVv3fV

Score

N/A

Malware Config

Signatures

Files

65d9944de110c964b917dcf67bee97ffa6fe5a8bc8a1a31062cc5f2bec270727
.exe windows x86

5f1c3c28688d05351c994882cb35c703

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadFile
GetCurrentDirectoryW
InitializeCriticalSection
LeaveCriticalSection
IsBadStringPtrW
FindResourceA
SetFileTime
GetFileSize
GetStartupInfoW
lstrcatA
GetLastError
SetFileTime
SetFileTime
SetFileAttributesW
GetModuleHandleA
GetLocalTime
CreateMutexA
CloseHandle
FormatMessageA
HeapCreate
lstrcpyA

msi

MsiCreateRecord
MsiCloseHandle
MsiAdvertiseProductA
MsiCloseAllHandles

user32

DispatchMessageA
SetCursorPos
GetWindowTextA
wsprintfW
PeekMessageW
LoadCursorW
PostMessageW
GetWindowLongW
SetFocus
IsDialogMessageA
GetWindowRect
IsWindow
IsZoomed

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 775KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 241B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f1c3c28688d05351c994882cb35c703

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 708KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 775KB - Virtual size: 1.4MB

.text1 Size: 1024B - Virtual size: 241B

.data2 Size: 512B - Virtual size: 161B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 708KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 775KB - Virtual size: 1.4MB

.text1
Size: 1024B - Virtual size: 241B

.data2
Size: 512B - Virtual size: 161B