e792680af0e44ec86515ec32ea45569b9d17761c6e90fe8c59ce2aad83194280

General

Target

e792680af0e44ec86515ec32ea45569b9d17761c6e90fe8c59ce2aad83194280
Size

777KB
MD5

44bfa23eb9923079fbe5e53621a82130
SHA1

d985ed69ce6aea69cdbaa3390458e96206371413
SHA256

e792680af0e44ec86515ec32ea45569b9d17761c6e90fe8c59ce2aad83194280
SHA512

43b5343f16a0d674f52357ea36b3d115f52f3837ff1124bd77115c9c07382bd6078f68dcce985485f4f9735db07382d89c48d012b594f8fd0212c80afa60cc47
SSDEEP

12288:KOq0No9F/SyPwkx3hnaLG+jT2O5PZRsJgXUrPLCAsE16OOy7fTRaSuQOzZIag1gF:nd/kx1aF58eEXxhO0bqQMIbg

Score

N/A

Malware Config

Signatures

Files

e792680af0e44ec86515ec32ea45569b9d17761c6e90fe8c59ce2aad83194280
.exe windows x86

adae7d75f43612be91464b3f5cb704eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadFile
WriteConsoleW
WriteConsoleW
IsBadStringPtrA
lstrcpyW
CloseHandle
HeapCreate
IsValidLocale
GetLastError
GetModuleHandleA
GetFileSize
CreateMutexA
lstrlenW
FormatMessageA
GetStartupInfoA
GetFileTime
WriteConsoleW
GetFileAttributesA
GetCurrentDirectoryA
ReleaseMutex
FindResourceA

msi

MsiCloseAllHandles
MsiCreateRecord
MsiCloseHandle
MsiAdvertiseProductA

clbcatq

DllGetClassObject
SetupOpen
ComPlusMigrate
SetSetupSave
ComPlusMigrate
SetupOpen
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
SetSetupSave
ComPlusMigrate
DllGetClassObject
SetupOpen

ntshrui

IsPathSharedA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 766KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

adae7d75f43612be91464b3f5cb704eb

Headers

File Characteristics

Imports

kernel32

msi

clbcatq

ntshrui

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 766KB - Virtual size: 2.1MB

.adata Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 240B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 766KB - Virtual size: 2.1MB

.adata
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 240B