1e2b420ebfddd59872ff768f3d54d773a2b9985b8acc681c4ad6660890bb84b2

General

Target

1e2b420ebfddd59872ff768f3d54d773a2b9985b8acc681c4ad6660890bb84b2
Size

301KB
MD5

931bcefa009dda2ebf9428dd9fcca14a
SHA1

8ea5b063930458d9d14b0d20703401502cb23467
SHA256

1e2b420ebfddd59872ff768f3d54d773a2b9985b8acc681c4ad6660890bb84b2
SHA512

a7a0af60645525a8ac0762f3dd358940dd89c4f1e15c80544786ce2f50d091a50ecd1b08a64f02754f1e2b2e957904f28ddba62b53e3f5fbd15ab535fc74aa9f
SSDEEP

6144:ZZm4PM2gmcVR8cCNeUG2qqS6/HUUnoBOZn8o03YqYF6V4kyr2:ZnPMdmcT8TcQ3/joB8nAYT8o2

Score

N/A

Malware Config

Signatures

Files

1e2b420ebfddd59872ff768f3d54d773a2b9985b8acc681c4ad6660890bb84b2
.exe windows x86

e0aa20db3a1268f045a3b85a4e4d1fa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteConsoleW
ReadFile
FindResourceA
CloseHandle
GetFileTime
GetStartupInfoA
GetFileAttributesA
FormatMessageA
GetCurrentDirectoryA
HeapCreate
GetModuleHandleA
GetFileSize
IsValidLocale
lstrcpyW
GetLastError
ReleaseMutex
WriteConsoleW
CreateMutexA
lstrlenW
IsBadStringPtrA
WriteConsoleW

msi

MsiCreateRecord
MsiAdvertiseProductA
MsiCloseHandle
MsiCloseAllHandles

clbcatq

CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
DllGetClassObject
SetSetupSave
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetupOpen
SetSetupSave
ComPlusMigrate
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e0aa20db3a1268f045a3b85a4e4d1fa2

Headers

File Characteristics

Imports

kernel32

msi

clbcatq

ntshrui

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 290KB - Virtual size: 289KB

.adata Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 240B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 290KB - Virtual size: 289KB

.adata
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 240B