b4de101107ae893787cedda34c599c63b56f0108b06a4591f152867ea0ab8aa8

Sharing

Copy URL Twitter E-mail

General

Target

b4de101107ae893787cedda34c599c63b56f0108b06a4591f152867ea0ab8aa8
Size

185KB
MD5

627e7dab8b8fe1a7d37ea5b64d2573a5
SHA1

c374716827fb6bd8baba89e12097fea886c24085
SHA256

b4de101107ae893787cedda34c599c63b56f0108b06a4591f152867ea0ab8aa8
SHA512

9540ad22062e2e6f08282fbf3777fac887507c8004d9906b286e66ccda81531ccd8696e615a5a5c107cbf4e6b16e1dee55bdda34c824ee492dcfa658a03b0d84
SSDEEP

3072:d6X4ToHbbLm2QC9FdtoRWxbtzS1apqYG8jwphSwvfpawFoJDAf2QQj9/nepxhb:d6Pq9C9X3xVHG8EnSEpawFWAf23j9WpH

Score

N/A

Malware Config

Signatures

Files

b4de101107ae893787cedda34c599c63b56f0108b06a4591f152867ea0ab8aa8
.dll windows x86

0f5a804e3e915df1ae39f2c318158a4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
LoadLibraryW
GetLastError
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
Sleep
GetTickCount
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
lstrcpynW
ReadFile
ConnectNamedPipe
DisconnectNamedPipe
LocalFree
WriteFile
GetOverlappedResult
CreateNamedPipeW
CreateThread
CancelIo
GlobalAlloc
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GlobalFree
lstrlenW
SetEvent
GetSystemWindowsDirectoryW
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
SetLastError
ResetEvent
CloseHandle
GetProcAddress
FreeLibrary
CreateEventW
WaitForMultipleObjects

msvcrt

wcsrchr
wcschr
_memicmp
free
_initterm
_adjust_fdiv
malloc
wcstoul
wcscmp
iswctype
_vsnwprintf
_wcsnicmp
wcslen
_wcsicmp
_except_handler3

user32

MessageBoxW

spoolss

EndDocPrinter
ReadPrinter
WritePrinter
StartDocPrinterW
SetJobW
GetPrinterW
GetPrinterDriverW
OpenPrinterW
ClosePrinter
ImpersonatePrinterClient
RevertToPrinterSelf

gdi32

DeleteDC
CancelDC
CreateDCW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

SHGetFolderPathW

Exports

Exports

ClosePrintProcessor
ControlPrintProcessor
EnumPrintProcessorDatatypesW
GetPrintProcessorCapabilities
OpenPrintProcessor
PrintDocumentOnPrintProcessor

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0f5a804e3e915df1ae39f2c318158a4f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

spoolss

gdi32

advapi32

shell32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 272B

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 2KB - Virtual size: 1KB

.text Size: 165KB - Virtual size: 168KB

.text
Size: 16KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 272B

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 165KB - Virtual size: 168KB