95db69a1412bee76df8aa07708260ee32780e740501e75707a2ea202d86921ca

General

Target

95db69a1412bee76df8aa07708260ee32780e740501e75707a2ea202d86921ca
Size

92KB
MD5

5d87cf08b052b9b3d435afa3d0d924b7
SHA1

97fa2cac1c001b5ffe45d5ba3a365e700b42ed59
SHA256

95db69a1412bee76df8aa07708260ee32780e740501e75707a2ea202d86921ca
SHA512

e4d9cdb4b8445626b875962b9f06768852303af82a8a0c31406dc7f78dd5ba8b151ff448af9dc69b3911be8954053bd80632d9fd8d2a4c17c6256d0914a544f8
SSDEEP

1536:fRmUebiRV0dM05N0nqx1WKkdmLBegV3ktXWzfoDXZ5S+D+kux:ZegVGZ6qgdmLx2xWzfoDJ5ZSx

Score

N/A

Malware Config

Signatures

Files

95db69a1412bee76df8aa07708260ee32780e740501e75707a2ea202d86921ca
.dll windows x86

1061d48e83c8c22754e5a65b8e68d124

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetHandleInformation
GetVersion
IsValidLocale
GetProcAddress
LoadLibraryA
VirtualAlloc
GetSystemTime

winspool.drv

GetPrinterDataExA
ClosePrinter
DeletePrintProcessorA
AddFormA
EnumPortsA
SetPrinterDataA
FreePrinterNotifyInfo
ConnectToPrinterDlg
GetPrinterDriverDirectoryA
FindFirstPrinterChangeNotification
EnumPrinterKeyA
EndPagePrinter
DeleteFormA
EndDocPrinter
StartPagePrinter
GetPrinterA
AddPrintProvidorA
AddPrinterConnectionA
SetPrinterDataExA
ResetPrinterA
EnumPrinterDataA
DeletePrinterDriverA
OpenPrinterA
GetPrintProcessorDirectoryA
AdvancedDocumentPropertiesA
DeletePortA
PrinterMessageBoxA
FindClosePrinterChangeNotification
SetFormA
SetPrinterA
AddPrinterDriverExA
EnumPrinterDriversA
EnumMonitorsA
GetPrinterDriverA
ConfigurePortA
DeletePrintProvidorA
AddPrinterDriverA
DeletePrinterDriverExA

msvcrt

_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
fseek
fopen
fclose
fread
memset
printf
fwrite
ftell
sprintf
_unlink

Exports

Exports

OUEYEUSOHCH

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1061d48e83c8c22754e5a65b8e68d124

Headers

File Characteristics

Imports

kernel32

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 52KB - Virtual size: 50KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 52KB - Virtual size: 50KB

.reloc
Size: 4KB - Virtual size: 3KB