c6c98204666f6aac57ca07a762c88d345d6fee3e238975136ecb3fd7d031b680

General

Target

c6c98204666f6aac57ca07a762c88d345d6fee3e238975136ecb3fd7d031b680
Size

33KB
MD5

4896c042dcd35d3b0f49e793e0bdabb8
SHA1

0a4e70bf68d2fd33abb7d4b99ddf25d5e6cc995e
SHA256

c6c98204666f6aac57ca07a762c88d345d6fee3e238975136ecb3fd7d031b680
SHA512

c9b4cd5911c42a03fb5c3a47171c084045e938820b7b4002e4b1346e5e17524a0b3cf492a3cd264388d99d1aa27dfe52be0caff15da5d9a63c16e2928b022a4c
SSDEEP

768:3olTFGG7pjnpU5KA8b5bqsdcFw5L97O3gW0uE2XNlLTUsDHsV:3AdZSIA6tqicFw23g7uE2dtTUqHa

Score

N/A

Malware Config

Signatures

Files

c6c98204666f6aac57ca07a762c88d345d6fee3e238975136ecb3fd7d031b680
.exe windows x86

a9261a56b4d94c38f5da54d2b232e948

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

DevQueryPrint
EnumPrinterDriversW

kernel32

VirtualFree
LeaveCriticalSection
GetModuleFileNameA
SetCurrentDirectoryA
EnterCriticalSection
lstrcpynA
VirtualQuery
GetStdHandle
GetStartupInfoA
WriteFile
ExitThread
SetThreadLocale
WideCharToMultiByte
FindFirstFileA
InitializeCriticalSection
GetLocaleInfoA
GetCurrentDirectoryA
VirtualAlloc
GetThreadLocale
FreeLibrary
DeleteCriticalSection
FindClose
UnhandledExceptionFilter
lstrlenA
LoadLibraryExA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsGetValue
TlsSetValue

advapi32

OpenProcessToken
AllocateAndInitializeSid
LookupPrivilegeValueA
FreeSid
AdjustTokenPrivileges
GetTokenInformation
EqualSid
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCloseKey

oleaut32

SysAllocStringLen
SysReAllocStringLen
SysFreeString

comdlg32

GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA
GetOpenFileNameW

Sections

.perplex
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

jj924enj
Size: 13KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9261a56b4d94c38f5da54d2b232e948

Headers

DLL Characteristics

File Characteristics

Imports

winspool.drv

kernel32

advapi32

oleaut32

comdlg32

Sections

.perplex Size: 9KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

jj924enj Size: 13KB - Virtual size: 43KB

.perplex
Size: 9KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB

jj924enj
Size: 13KB - Virtual size: 43KB