5950e41857056c85531276c4dcfa4a1a2cab6a9700d6c72ea577850dba3076c1

General

Target

5950e41857056c85531276c4dcfa4a1a2cab6a9700d6c72ea577850dba3076c1
Size

22KB
MD5

6ac21d0a663371323f03b752adb14dc0
SHA1

91031df7ea12b966961bd355a66b52769e50ab5f
SHA256

5950e41857056c85531276c4dcfa4a1a2cab6a9700d6c72ea577850dba3076c1
SHA512

a44e364cd80ec96e18001a284402123346f006697bff0fbcbb072219bd26237e4a8f5f1ccac4c540d6f94205ac3e4b579eb8a00674c714d41287b4e0477d6692
SSDEEP

384:KVG7+AHpbHhf6FzUgPltKX+JZkUTrv27JdgvH:KM7+AHpbHN6FzUgPltKX+JZkoTcJw

Score

N/A

Malware Config

Signatures

Files

5950e41857056c85531276c4dcfa4a1a2cab6a9700d6c72ea577850dba3076c1
.exe windows x86

b19cc5daf058e729fb78f59b1ea57369

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindResourceA
HeapCreate
lstrcpyW
FormatMessageA
ReleaseMutex
WriteConsoleW
GetFileSize
lstrcpyA
WriteConsoleW
CloseHandle
GetModuleHandleA
GetFileTime
WriteConsoleW
GetCurrentDirectoryW
IsBadStringPtrW
ReadFile
GetStartupInfoA
SetFileAttributesA
IsValidLocale
GetLastError
CreateMutexA

msi

MsiCloseAllHandles
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseHandle

user32

PeekMessageW
GetWindowLongW
LoadCursorW
IsDialogMessageA
SetCursorPos
wsprintfW
IsCharLowerA
PostMessageW
GetWindowTextA
IsZoomed
IsWindow
DispatchMessageA
SetFocus

apphelp

ApphelpCheckIME

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fedit
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b19cc5daf058e729fb78f59b1ea57369

Headers

File Characteristics

Imports

kernel32

msi

user32

apphelp

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 11KB - Virtual size: 11KB

.fedit Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 224B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 11KB - Virtual size: 11KB

.fedit
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 224B