6b1face6b1df57abdcdd51fdf3440e49[.]exe

General

Target

6b1face6b1df57abdcdd51fdf3440e49.exe
Size

515KB
MD5

6b1face6b1df57abdcdd51fdf3440e49
SHA1

4fdf141fb23faed163f08058720d208ec616f432
SHA256

f414b58167438e77909afa13c1e137874fb7aad4983d30cd9b769f205ace0078
SHA512

b5d17e5a4e8cf43019a16cc55914c7e0a37cfad45020105389ad590438488d35a0cb28e3d2e02e682277ab25afaa0f4a75a6e7da8374572ba64e6cc41a8b9021
SSDEEP

12288:fOFiyeZBOh8SLy8pROrSqcoBtdCfTJY503hw2rNwAxYYUMH:iilZB6RBL0SvoBTCfCSTN1Uw

Score

N/A

Malware Config

Signatures

Files

6b1face6b1df57abdcdd51fdf3440e49.exe
.exe windows x86

6bc000ab62302db8cd5a1f1db9d5badd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
GetTickCount
GetLocalTime
GetProcAddress
LoadLibraryW
GetSystemTime
SetStdHandle
GetLocaleInfoA
DebugBreak
RaiseException
GetVersionExA
LoadLibraryA
GetCommandLineA
GetModuleHandleA
IsBadWritePtr
IsBadReadPtr
HeapValidate
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
CloseHandle
GetCurrentProcess
FreeLibrary
RtlUnwind
TerminateProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
HeapReAlloc
VirtualAlloc
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
IsBadCodePtr
LCMapStringA
LCMapStringW
SetFilePointer
VirtualProtect
GetSystemInfo
FlushFileBuffers

winspool.drv

EnumPrintProcessorsW

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6bc000ab62302db8cd5a1f1db9d5badd

Headers

File Characteristics

Imports

kernel32

winspool.drv

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 2KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 2KB