133ca4333bfd40d6d5df6fd6c0ea70c5792a49713c08328df5f65ac9dd48f020

General

Target

133ca4333bfd40d6d5df6fd6c0ea70c5792a49713c08328df5f65ac9dd48f020
Size

401KB
MD5

6bc4efe58e3ac779feb5f81670632030
SHA1

649cdb22be31677db1390597fa9f00ab7dae594b
SHA256

133ca4333bfd40d6d5df6fd6c0ea70c5792a49713c08328df5f65ac9dd48f020
SHA512

c363d76bdef5948a0bab07739f5accb5aa9e8235da13ce8f880c1418b2c7e9cb1fae9a0de1df736cba810837cd01c8f3a8dc3c9330577c6c39970fd67dc66116
SSDEEP

6144:AW0HLhlStlT0v98/fEoqZH83pLG+LS7XHAqIg7NERD:4HLh0t+98/fecZe7XHAqX7NERD

Score

N/A

Malware Config

Signatures

Files

133ca4333bfd40d6d5df6fd6c0ea70c5792a49713c08328df5f65ac9dd48f020
.exe windows x86

63fd3e26a9f04d897088ccfb93995070

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadFile
lstrcatA
GetLocalTime
GetModuleHandleW
SetFileTime
GetStartupInfoW
lstrcpyA
HeapCreate
GetModuleHandleA
SetFileTime
SetFileTime
IsBadWritePtr
FormatMessageW
SetFileAttributesW
GetLastError
FindResourceA
CloseHandle
GetFileSize
CreateMutexW
InitializeCriticalSection
LeaveCriticalSection

msi

MsiCloseHandle
MsiCloseAllHandles
MsiCreateRecord
MsiAdvertiseProductA

user32

IsWindow
wsprintfW
SetCursorPos
PostMessageW
LoadCursorW
PeekMessageW
GetWindowLongW
DispatchMessageA
IsZoomed
GetWindowRect
SetFocus
IsDialogMessageA
GetWindowTextA

wldap32

ldap_add

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 384KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 1KB - Virtual size: 193B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

63fd3e26a9f04d897088ccfb93995070

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 260KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 384KB - Virtual size: 636KB

.data1 Size: 1KB - Virtual size: 193B

.data2 Size: 512B - Virtual size: 129B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 260KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 384KB - Virtual size: 636KB

.data1
Size: 1KB - Virtual size: 193B

.data2
Size: 512B - Virtual size: 129B