69d11655d7d0faa9d80a003b39cd896560e48f61ca1a5fbac9547ede6fc7edbb

General

Target

69d11655d7d0faa9d80a003b39cd896560e48f61ca1a5fbac9547ede6fc7edbb
Size

22KB
MD5

6be7cdf992611d2541f4252253ca8060
SHA1

6de2e1751266cc97e5ba4cea1918fcd9c1de4d20
SHA256

69d11655d7d0faa9d80a003b39cd896560e48f61ca1a5fbac9547ede6fc7edbb
SHA512

7fe760dec0d07798cf728a41184f5dda580caeef420e188bc63f42786defa82d70130f9e96a3596c92c806ae77d71c7db7c3733169c6c9847b51c7e655c3360b
SSDEEP

384:nWlbnCZ3tqfwqG9zJyTyrbj8njH2xI/2Nb:nWlDCZtqfMLPjG2Y

Score

N/A

Malware Config

Signatures

Files

69d11655d7d0faa9d80a003b39cd896560e48f61ca1a5fbac9547ede6fc7edbb
.exe windows x86

9c8bb255ad3cb3db33ebee33c0abf73d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
lstrlenW
ReleaseMutex
WriteConsoleW
CreateMutexA
HeapCreate
WriteConsoleW
GetModuleHandleA
GetFileTime
FindResourceA
WriteConsoleW
FormatMessageA
IsValidLocale
GetFileAttributesA
GetCurrentDirectoryA
ReadFile
GetFileSize
CloseHandle
GetStartupInfoA
IsBadStringPtrA
lstrcpyW

msi

MsiCreateRecord
MsiAdvertiseProductA
MsiCloseHandle
MsiCloseAllHandles

clbcatq

DllGetClassObject
DllGetClassObject
CheckMemoryGates
SetSetupSave
SetupOpen
CheckMemoryGates
SetSetupSave
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetupOpen
ComPlusMigrate
SetupOpen

ntshrui

IsPathSharedA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c8bb255ad3cb3db33ebee33c0abf73d

Headers

File Characteristics

Imports

kernel32

msi

clbcatq

ntshrui

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 11KB - Virtual size: 11KB

.adata Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 240B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 11KB - Virtual size: 11KB

.adata
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 240B