1c961037f785971538c1f41b06637472b1bd415143890cede3aac3eea03f7656

General

Target

1c961037f785971538c1f41b06637472b1bd415143890cede3aac3eea03f7656
Size

597KB
MD5

960c268ad619600b0333244d002e2d58
SHA1

10ccaf5f652b3ec968eb9d25db25e3ec05116d0a
SHA256

1c961037f785971538c1f41b06637472b1bd415143890cede3aac3eea03f7656
SHA512

e3fd4c5845231cdbeec057e0f493c2a059d89c258d8a18c8c1493f43a0b8cccf95ab9ac6b456365776a5878e99039f7f86d17ef3f2bae37dc9ab309939ad67d6
SSDEEP

12288:h4JGp+GehF2kj9JfVNLnafDUQ9hAOhF6mh6+i3pc1gDADO4:qJUehkiNODUdObYpWDf

Score

N/A

Malware Config

Signatures

Files

1c961037f785971538c1f41b06637472b1bd415143890cede3aac3eea03f7656
.exe windows x86

e60fad791e7c79a932504dd278e73c06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetHandleInformation
GetAtomNameA
LoadLibraryA
IsValidLocale
GetStartupInfoW
GetSystemTime
GetLocalTime
FreeLibrary
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetVersion

gdi32

GetObjectA
SelectObject
GetStockObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
GdiFlush
SetPixelFormat
CombineRgn
WidenPath

advapi32

AddAuditAccessObjectAce
RegUnLoadKeyW
SystemFunction004
SystemFunction013
LsaLookupPrivilegeDisplayName

shell32

StrStrIW

shlwapi

UrlGetLocationW
StrSpnA
StrNCatW
PathAppendW
SHRegDeleteUSValueA
SHRegCloseUSKey
PathAppendA
PathCompactPathExA
PathFindFileNameW
PathFileExistsW
SHQueryInfoKeyW

winspool.drv

AddMonitorA
AddPrintProvidorA
DocumentPropertiesA
GetPrintProcessorDirectoryA
DeletePrinterKeyW
EnumPrinterDriversA
GetPrinterDriverDirectoryW
StartDocPrinterW
StartDocDlgW
DocumentEvent
ord209
DeletePrinterConnectionA
ord102
EnumMonitorsW
SplDriverUnloadComplete
OpenPrinterA
ord212

msvcrt

_mbscoll
ftell
fprintf
_unlink
fseek
_mbctohira
_wfindnext
_wspawnve
_sleep
strstr
_mbsspn
printf
fputs
fwprintf
fread
fsetpos
_wspawnlpe
fwrite
mbstowcs
fputc
wcsxfrm
fopen
_CIatan
_setmode
sprintf
iswdigit
memset
_strrev
ferror
fclose
_mbsnbicoll
frexp
feof
_locking

Sections

.text
Size: 580KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e60fad791e7c79a932504dd278e73c06

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

shell32

shlwapi

winspool.drv

msvcrt

Sections

.text Size: 580KB - Virtual size: 576KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.text
Size: 580KB - Virtual size: 576KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB