223760b1db6c983e34e6e8dd1bcce6e5a013e98d3ba7deb2d64ed42796fb4ae2

General

Target

223760b1db6c983e34e6e8dd1bcce6e5a013e98d3ba7deb2d64ed42796fb4ae2
Size

777KB
MD5

09e94b4b239f0e232f7e435bea67d347
SHA1

1d747d13d636dddfba052a1369fa92c5733e8991
SHA256

223760b1db6c983e34e6e8dd1bcce6e5a013e98d3ba7deb2d64ed42796fb4ae2
SHA512

5f9f4000c7212ca2a206026d7afab9a1ca32bb4b3bd46e14ef912e5356f3e03dbcbb5167daebd8cfb72968dd26c35893dbc07eaca5a1b6ae21b79081d832815f
SSDEEP

24576:ERBYanFfVtVJ0H/YaB1mbyUmY5dLpOd1KNo:EDYGFfVnJ0HgaBwGO5dLoK6

Score

N/A

Malware Config

Signatures

Files

223760b1db6c983e34e6e8dd1bcce6e5a013e98d3ba7deb2d64ed42796fb4ae2
.exe windows x86

a10da0f64b88bdb29f17ef0ebfc6ad7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryW
CreateMutexA
SetFileAttributesA
GetFileSize
lstrcpyW
ReadConsoleA
ReadFile
FindResourceA
GetModuleHandleA
GetLastError
ReadConsoleA
GetStartupInfoW
lstrcpyA
IsBadStringPtrW
ReadConsoleA
HeapCreate
ReleaseMutex
FormatMessageA
GetFileTime
IsValidLocale
CloseHandle

msi

MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA

user32

SetCursorPos
IsDialogMessageA
PostMessageW
GetWindowTextA
wsprintfW
PeekMessageW
SetFocus
IsCharLowerA
IsZoomed
GetWindowLongW
IsWindow
LoadCursorW
DispatchMessageA

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 766KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 263B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a10da0f64b88bdb29f17ef0ebfc6ad7e

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 766KB - Virtual size: 2.1MB

.text1 Size: 1024B - Virtual size: 263B

.data1 Size: 512B - Virtual size: 224B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 766KB - Virtual size: 2.1MB

.text1
Size: 1024B - Virtual size: 263B

.data1
Size: 512B - Virtual size: 224B