d201ade26f7dd59b0388f41453d214bff2b3aa4ca933f6f61eff65dad1618cee

General

Target

d201ade26f7dd59b0388f41453d214bff2b3aa4ca933f6f61eff65dad1618cee
Size

124KB
MD5

6ec178ae9df5d5e5a14b1a4d121771a2
SHA1

77054ac214f45c4c43b14994be872adc5f84c95b
SHA256

d201ade26f7dd59b0388f41453d214bff2b3aa4ca933f6f61eff65dad1618cee
SHA512

d654cc37903aa218bd6ddaf0061e1f7ac349b48224a696c5905ac1ed84ab5c9cf7eb2b1f90afda06acd97db654dfe1cbb0ea7c0c55536378ae34ed94e167ee9f
SSDEEP

1536:QA5k1/xSwJmihtjrJO8vbJa3CFehJ3NYvqsd+uibNTVa12y:xkhkLmvdaPhAaubD

Score

N/A

Malware Config

Signatures

Files

d201ade26f7dd59b0388f41453d214bff2b3aa4ca933f6f61eff65dad1618cee
.dll windows x86

425e76662bbd1403c4d31686c30dd5fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
LocalFree
HeapAlloc
GetProcessHeap
LocalAlloc
FreeLibrary
lstrcpyA
lstrcmpiA
GetUserDefaultLangID
GetVersionExA
DisableThreadLibraryCalls
WideCharToMultiByte
MultiByteToWideChar
SetLastError
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
GetProcAddress

user32

LoadStringA
wsprintfA

winspool.drv

GetPrinterA
OpenPrinterW
ClosePrinter
GetPrinterDriverA
OpenPrinterA
GetPrinterDataA
SetPrinterDataA
GetPrinterW

msvcrt

_strnicmp
_stricmp
_adjust_fdiv
malloc
_initterm
free
_makepath
_access
_splitpath

Exports

Exports

DevQueryPrintEx
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
PrinterProperties

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

425e76662bbd1403c4d31686c30dd5fe

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 492B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 416B

.text Size: 96KB - Virtual size: 96KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 492B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 416B

.text
Size: 96KB - Virtual size: 96KB