438584fab24a03681b159b9137dd9c7279baa18a80060a7d9c070d71c5c55cbf

General

Target

438584fab24a03681b159b9137dd9c7279baa18a80060a7d9c070d71c5c55cbf
Size

118KB
MD5

6b4d5dfec51006b3c447e85662b881a0
SHA1

64e12b7067478b3f02b22e2e6e6512ecdc99c83f
SHA256

438584fab24a03681b159b9137dd9c7279baa18a80060a7d9c070d71c5c55cbf
SHA512

6492e7bc0c7b1aee3e3e9f144ca22c8b7c5d7bb44faadc035b84b3b03a634f5b9c85c4881d8698b53d62841e407bf6ea67268d2cc473f03a98c5ce7a29afbf61
SSDEEP

1536:Vh3bRbmSruPx5+IqevawYdPsQhDHmDaDepbM6spZBN6WxpYImoodM83vGxq4LGpl:Vh3bRbe5591vaw4EdWDyyZxxpqL5Bl

Score

N/A

Malware Config

Signatures

Files

438584fab24a03681b159b9137dd9c7279baa18a80060a7d9c070d71c5c55cbf
.exe windows x86

0065504124df3d46b7073195b3558c83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetFileTime
SetFileAttributesW
GetCurrentDirectoryW
GetModuleHandleA
lstrcpyA
FindResourceA
CreateMutexW
SetFileTime
ReadFile
IsBadWritePtr
GetLocalTime
FormatMessageW
SetFileTime
HeapCreate
LeaveCriticalSection
GetLastError
CloseHandle
GetFileSize
InitializeCriticalSection
lstrcatA
GetStartupInfoW

msi

MsiCloseAllHandles
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseHandle

user32

LoadCursorW
PostMessageW
SetFocus
PeekMessageW
SetCursorPos
GetWindowRect
IsZoomed
GetWindowTextA
DispatchMessageA
wsprintfW
IsDialogMessageA
IsWindow
GetWindowLongW

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 1024B - Virtual size: 193B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0065504124df3d46b7073195b3558c83

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 103KB - Virtual size: 103KB

.data1 Size: 1024B - Virtual size: 193B

.data2 Size: 512B - Virtual size: 146B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 103KB - Virtual size: 103KB

.data1
Size: 1024B - Virtual size: 193B

.data2
Size: 512B - Virtual size: 146B