0b526146ebf10ca6eaf10018e7e391e52ccd676a371f8ad9164858411cde8ad8

General

Target

0b526146ebf10ca6eaf10018e7e391e52ccd676a371f8ad9164858411cde8ad8
Size

118KB
MD5

966db757febc5997a441a8e963afb170
SHA1

c2df0a475b4b1b0e3504439461c9bd966c12ac74
SHA256

0b526146ebf10ca6eaf10018e7e391e52ccd676a371f8ad9164858411cde8ad8
SHA512

06bbae1baeb536b45207cd951a6777136cdda0dff12b6429b80472c8ebd4bad2dd15ce375df64b6e8191bd97a91d2b8044d88ff480f1772f879e08d373948c0b
SSDEEP

3072:+rFuL6ko4Mb6Rwubb5b8zIfyETkfavUmxPHYW+:nLto4MaqrETkazJ4W+

Score

N/A

Malware Config

Signatures

Files

0b526146ebf10ca6eaf10018e7e391e52ccd676a371f8ad9164858411cde8ad8
.exe windows x86

f9863cc66db0435fcdb48769aec340ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
CloseHandle
SetFileTime
FormatMessageA
lstrcpyA
HeapCreate
FindResourceA
GetFileSize
ReadFile
lstrcatA
LeaveCriticalSection
SetFileAttributesW
SetFileTime
CreateMutexA
SetFileTime
InitializeCriticalSection
GetLocalTime
GetModuleHandleA
GetCurrentDirectoryW
GetStartupInfoW
IsBadStringPtrW

msi

MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA

user32

GetWindowTextA
IsZoomed
DispatchMessageA
SetCursorPos
SetFocus
wsprintfW
PostMessageW
GetWindowRect
IsDialogMessageA
IsWindow
PeekMessageW
LoadCursorW
GetWindowLongW

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 1024B - Virtual size: 211B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9863cc66db0435fcdb48769aec340ae

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 103KB - Virtual size: 103KB

.data1 Size: 1024B - Virtual size: 211B

.data2 Size: 512B - Virtual size: 161B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 103KB - Virtual size: 103KB

.data1
Size: 1024B - Virtual size: 211B

.data2
Size: 512B - Virtual size: 161B