fd548041be9ea390198e68100aaedf791f13223a2f543442b065143ec2f0349f

General

Target

fd548041be9ea390198e68100aaedf791f13223a2f543442b065143ec2f0349f
Size

22KB
MD5

78a72902241a6da7cb175d69f83aeda0
SHA1

9bd974c1c1dc5a8f74c7e50493706fb41c06655a
SHA256

fd548041be9ea390198e68100aaedf791f13223a2f543442b065143ec2f0349f
SHA512

d8a12b5bc79d8cab67677c0042578f5363a548037e0003e3e13c47c9e3eea6461b138178cc6619bd31ac203df6734cc711cc82009204c4a27e6fc0589cac6dcf
SSDEEP

192:mRdHjkP5+fBBO3bbtarr+bZZXefj5haAHgYxlmhtxvHkrvvTXF5N3rvtscoJdgv7:mRpjkPtgA32jSAAYCfmXFrv27JdgvH

Score

N/A

Malware Config

Signatures

Files

fd548041be9ea390198e68100aaedf791f13223a2f543442b065143ec2f0349f
.exe windows x86

b196dea3cec2f5bb23d972f1e2113dec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

IsValidLocale
CreateMutexA
CloseHandle
GetFileSize
WriteConsoleW
GetFileTime
GetModuleHandleA
SetFileAttributesA
ReadFile
GetLastError
FormatMessageA
GetCurrentDirectoryW
lstrcpyW
lstrcpyA
WriteConsoleW
GetStartupInfoA
ReleaseMutex
HeapCreate
WriteConsoleW
IsBadStringPtrW
FindResourceA

msi

MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA

user32

LoadCursorW
SetFocus
IsCharLowerA
wsprintfW
GetWindowTextA
DispatchMessageA
PostMessageW
SetCursorPos
GetWindowLongW
PeekMessageW
IsDialogMessageA
IsWindow
IsZoomed

apphelp

ApphelpCheckIME

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fedit
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b196dea3cec2f5bb23d972f1e2113dec

Headers

File Characteristics

Imports

kernel32

msi

user32

apphelp

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 11KB - Virtual size: 11KB

.fedit Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 224B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 11KB - Virtual size: 11KB

.fedit
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 224B