0f89037ef7f8d466e65c20ae100efa12a2de63d37ebeb2216adb05448e40905c

General

Target

0f89037ef7f8d466e65c20ae100efa12a2de63d37ebeb2216adb05448e40905c
Size

790KB
MD5

0f2570a17536160778462d98d15e32b6
SHA1

067cc6c51fe122c6beafa2c9276ccef2559dfdf8
SHA256

0f89037ef7f8d466e65c20ae100efa12a2de63d37ebeb2216adb05448e40905c
SHA512

2367bb2152c4a67d05abcb34085261f7570c2f85b8f4046f6e03440d8116b693ca6afcbec1e31e88bab61d48b5b64085466be8438240c48dcf0dc078c91da113
SSDEEP

24576:H8WnasY4zNZrluM2aVoyvSQQih5UpDzz4u:H82asY4JZroyVFvFj/U9E

Score

N/A

Malware Config

Signatures

Files

0f89037ef7f8d466e65c20ae100efa12a2de63d37ebeb2216adb05448e40905c
.exe windows x86

969b733383a1df572b7610782330c0f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadFile
IsBadStringPtrW
GetLocalTime
GetCurrentDirectoryW
SetFileTime
SetFileTime
FindResourceA
SetFileTime
InitializeCriticalSection
CreateMutexA
GetModuleHandleA
LeaveCriticalSection
lstrcpyA
SetFileAttributesW
HeapCreate
FormatMessageW
GetStartupInfoW
GetFileSize
CloseHandle
GetLastError
lstrcatA

msi

MsiAdvertiseProductA
MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles

user32

PostMessageW
GetWindowTextA
GetWindowLongW
IsZoomed
GetWindowRect
SetFocus
wsprintfW
IsDialogMessageA
SetCursorPos
LoadCursorW
PeekMessageW
IsWindow
DispatchMessageA

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 775KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 1024B - Virtual size: 211B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

969b733383a1df572b7610782330c0f5

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 716KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 775KB - Virtual size: 1.4MB

.data1 Size: 1024B - Virtual size: 211B

.data2 Size: 512B - Virtual size: 146B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 716KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 775KB - Virtual size: 1.4MB

.data1
Size: 1024B - Virtual size: 211B

.data2
Size: 512B - Virtual size: 146B