ecbfe30b155b73775e05fdd617d6f41b369156f255d984c165c3b036980ac5c0

General

Target

ecbfe30b155b73775e05fdd617d6f41b369156f255d984c165c3b036980ac5c0
Size

781KB
MD5

21a42c92ab9b4ba7e4cc30577d0405d6
SHA1

b70d365640353216c1a3d73980eef72ee78455b5
SHA256

ecbfe30b155b73775e05fdd617d6f41b369156f255d984c165c3b036980ac5c0
SHA512

65e258a6f39ab883438f4a6b31cebb20ebc1a4fdfa4b760b8c5dd8239d942586b4321c84a5277edfa3f82235022d489b34860775a48a51be71372e4594f16cb0
SSDEEP

12288:tW/sWUFQyEyn+15U4lba9rvlgdHq0QW3hjpPGq11hWEm1ZHg1l6CBATywd8Ckt4m:tWX+4Pe9rv/zW9UM/m1ZHQlqtiCkDT

Score

N/A

Malware Config

Signatures

Files

ecbfe30b155b73775e05fdd617d6f41b369156f255d984c165c3b036980ac5c0
.exe windows x86

16d8b97efc767fcd9fdcdacbe4358383

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetCurrentDirectoryW
FindResourceA
CloseHandle
ReleaseMutex
HeapCreate
FormatMessageA
CreateMutexA
GetLastError
ReadFile
GetStartupInfoW
lstrcpyW
lstrcpyA
GetFileTime
GetFileSize
IsValidLocale
ReadConsoleA
ReadConsoleA
SetFileAttributesA
ReadConsoleA
IsBadStringPtrW

msi

MsiCloseHandle
MsiCreateRecord
MsiCloseAllHandles
MsiAdvertiseProductA

user32

SetCursorPos
PeekMessageW
IsDialogMessageA
IsZoomed
SetFocus
GetWindowLongW
PostMessageW
LoadCursorW
GetWindowTextA
IsWindow
wsprintfW
IsCharLowerA
DispatchMessageA

wldap32

ldap_add

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 772KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16d8b97efc767fcd9fdcdacbe4358383

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 772KB - Virtual size: 2.1MB

.text1 Size: 1024B - Virtual size: 263B

.data1 Size: 512B - Virtual size: 224B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 772KB - Virtual size: 2.1MB

.text1
Size: 1024B - Virtual size: 263B

.data1
Size: 512B - Virtual size: 224B