f27bbc75d00bc312141580f323d3cd6c2cadca0bc16302e4b52b58231e418b1a

General

Target

f27bbc75d00bc312141580f323d3cd6c2cadca0bc16302e4b52b58231e418b1a
Size

119KB
MD5

938a5107c827b7afe1d06dd77a946359
SHA1

bb9aaa924817a5799dda22bac3d5c9c5081a704a
SHA256

f27bbc75d00bc312141580f323d3cd6c2cadca0bc16302e4b52b58231e418b1a
SHA512

76ec55fb342e22922c5100f439427e2c96740bcdbbc1171277e25eb4cc3c74d7285f33526fbec614a45c4e8e590a35a94671ec775cbaad90fe40770ab94df98b
SSDEEP

3072:qOqjBHwc/Iad1eCmx1xHhOKuuGuU7Hf2XsUyL:wImUNX2uY/28U

Score

N/A

Malware Config

Signatures

Files

f27bbc75d00bc312141580f323d3cd6c2cadca0bc16302e4b52b58231e418b1a
.exe windows x86

dfacc21024ac3058efb55349eb397875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindResourceA
HeapCreate
FormatMessageA
GetLocalTime
GetCurrentDirectoryW
lstrcpyA
ReadConsoleA
ReadConsoleA
GetLastError
CreateMutexA
ReadConsoleA
GetModuleHandleA
IsBadStringPtrW
LeaveCriticalSection
GetStartupInfoW
ReadFile
InitializeCriticalSection
lstrcatA
SetFileAttributesA
CloseHandle
GetFileSize

msi

MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord

user32

GetWindowLongW
PostMessageW
IsDialogMessageA
PeekMessageW
wsprintfW
GetWindowTextA
SetCursorPos
DispatchMessageA
IsCharLowerA
LoadCursorW
IsZoomed
SetFocus
IsWindow

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dfacc21024ac3058efb55349eb397875

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 105KB - Virtual size: 104KB

.text1 Size: 1024B - Virtual size: 263B

.data2 Size: 512B - Virtual size: 178B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 105KB - Virtual size: 104KB

.text1
Size: 1024B - Virtual size: 263B

.data2
Size: 512B - Virtual size: 178B