73476505e2d8910a9565f5895b26f8fba93c94ae77a7bacec20156b108b2692d

General

Target

73476505e2d8910a9565f5895b26f8fba93c94ae77a7bacec20156b108b2692d
Size

777KB
MD5

540dc214542bcc660a9d5514456be020
SHA1

6c21814ca2643a472c5494ec8d4ef96edfe53d54
SHA256

73476505e2d8910a9565f5895b26f8fba93c94ae77a7bacec20156b108b2692d
SHA512

c575e5011a3cad1051aca527f12ffc7b5b05e5a7dc605d4a5eed3b9b61eb4fd123445260fb21c799b8513b070ef98a2e74e09096fac2747c9ed8db20461861a0
SSDEEP

12288:qq0No9F/SyPwkx3hnaLG+jT2O5PZRsJgXUrPLCAsE16OOy7fTRaSuQOzZIag1gF:Gd/kx1aF58eEXxhO0bqQMIbg

Score

N/A

Malware Config

Signatures

Files

73476505e2d8910a9565f5895b26f8fba93c94ae77a7bacec20156b108b2692d
.exe windows x86

4846ac59685bcc2083752352aab3b1b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReleaseMutex
HeapCreate
CreateMutexA
GetLastError
FormatMessageA
GetFileTime
GetModuleHandleA
FindResourceA
GetFileSize
lstrlenW
WriteConsoleW
WriteConsoleW
lstrcpyW
GetFileAttributesA
IsBadStringPtrA
ReadFile
WriteConsoleW
GetCurrentDirectoryA
GetStartupInfoA
IsValidLocale
CloseHandle

msi

MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA

clbcatq

SetupOpen
DllGetClassObject
SetSetupSave
ComPlusMigrate
ComPlusMigrate
SetSetupSave
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
CheckMemoryGates
SetupOpen
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 766KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4846ac59685bcc2083752352aab3b1b0

Headers

File Characteristics

Imports

kernel32

msi

clbcatq

ntshrui

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 766KB - Virtual size: 2.1MB

.adata Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 240B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 766KB - Virtual size: 2.1MB

.adata
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 240B