b5658f801e8cd5dfc0b9dbdbdd7eb38e22e3b35684c8c596a85e615db633d88e

General

Target

b5658f801e8cd5dfc0b9dbdbdd7eb38e22e3b35684c8c596a85e615db633d88e
Size

777KB
MD5

7ccf4ba328f4fdc514597c829d2580e0
SHA1

6f2e801898083519a2ec060b464e7502284adf34
SHA256

b5658f801e8cd5dfc0b9dbdbdd7eb38e22e3b35684c8c596a85e615db633d88e
SHA512

5efe2a15ef2cf9988b236251be65a6f48f82b2c4be6c3ec97b47f944a571dec8b6cf6e39c65255208491e441aa696b8b72c24d3b4ffcb471d686d32f79675152
SSDEEP

24576:rA0xR3MP/nQOCww5wdE69twdaWeUruP3s7D:rZ8AwIwdN3Weu+QD

Score

N/A

Malware Config

Signatures

Files

b5658f801e8cd5dfc0b9dbdbdd7eb38e22e3b35684c8c596a85e615db633d88e
.exe windows x86

2093625018f8d288748b96350c1aaa1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateMutexA
GetFileAttributesA
ReadFile
ReleaseMutex
IsValidLocale
CloseHandle
GetFileTime
FormatMessageA
GetCurrentDirectoryA
IsBadStringPtrA
GetStartupInfoA
lstrlenW
GetLastError
WriteConsoleW
HeapCreate
GetModuleHandleA
WriteConsoleW
lstrcpyW
FindResourceA
WriteConsoleW
GetFileSize

msi

MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA

clbcatq

DllGetClassObject
ComPlusMigrate
SetSetupSave
DllGetClassObject
SetSetupSave
SetupOpen
CheckMemoryGates
SetupOpen
CheckMemoryGates
SetupOpen
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates

ntshrui

IsPathSharedA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 766KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2093625018f8d288748b96350c1aaa1e

Headers

File Characteristics

Imports

kernel32

msi

clbcatq

ntshrui

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 766KB - Virtual size: 2.1MB

.adata Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 240B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 766KB - Virtual size: 2.1MB

.adata
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 240B