28aa804e04d3c39199dc075f12e74eda2be6ed228a1c1226adf8439a0a7ce0e6

General

Target

28aa804e04d3c39199dc075f12e74eda2be6ed228a1c1226adf8439a0a7ce0e6
Size

790KB
MD5

0f6ecf681c0c169281ce432d7c131257
SHA1

7b500eccccec412e94f002b1ddca58a5e04ed86e
SHA256

28aa804e04d3c39199dc075f12e74eda2be6ed228a1c1226adf8439a0a7ce0e6
SHA512

100689ae60d8c003dce81bd03309f73ce7d6a5c1c69395ffe361a3f9a1a1b9bc1dc5146516c3b78fddef331181030c59a4b58c198f80b2eb6cb4f08d45e01a48
SSDEEP

24576:m8WnasY4zNZrluM2aVoyvSQQih5UpDzz4u:m82asY4JZroyVFvFj/U9E

Score

N/A

Malware Config

Signatures

Files

28aa804e04d3c39199dc075f12e74eda2be6ed228a1c1226adf8439a0a7ce0e6
.exe windows x86

80262de6cc5bfb7650b4475e41e69cd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetFileTime
SetFileAttributesW
lstrcatA
GetLocalTime
GetStartupInfoW
FindResourceA
GetLastError
ReadFile
CloseHandle
LeaveCriticalSection
GetModuleHandleA
FormatMessageA
InitializeCriticalSection
SetFileTime
HeapCreate
IsBadStringPtrW
CreateMutexA
SetFileTime
lstrcpyA
GetFileSize
GetCurrentDirectoryW

msi

MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA

user32

LoadCursorW
DispatchMessageA
PostMessageW
SetFocus
SetCursorPos
IsWindow
IsZoomed
wsprintfW
GetWindowLongW
IsDialogMessageA
GetWindowRect
GetWindowTextA
PeekMessageW

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 775KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 241B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

80262de6cc5bfb7650b4475e41e69cd7

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 708KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 775KB - Virtual size: 1.4MB

.text1 Size: 1024B - Virtual size: 241B

.data2 Size: 512B - Virtual size: 161B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 708KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 775KB - Virtual size: 1.4MB

.text1
Size: 1024B - Virtual size: 241B

.data2
Size: 512B - Virtual size: 161B