cea77d070fb4bc4bf37ec7dcb223004f63259e9db19551b9af8a15118582f713

Sharing

Copy URL

Twitter E-mail

General

Target

cea77d070fb4bc4bf37ec7dcb223004f63259e9db19551b9af8a15118582f713
Size

278KB
MD5

508330d217c6921122c5d5a72bafd820
SHA1

2871e5d9e3f879f1aed6eaf077587148c49d6faa
SHA256

cea77d070fb4bc4bf37ec7dcb223004f63259e9db19551b9af8a15118582f713
SHA512

19e1b8e7d24d49fcfdc7129ab189d29bde28c4d961b97914348e0265f0f09ccf1683d778f7ebbf8d162d56c55fab41afeee5983211af7bb6c448c8dba01e186a
SSDEEP

6144:lsNh3FiYgojSy1y454e4590y+GfqkP+dEkFj:lsNhViYgXP45Q59UVF

Score

N/A

Malware Config

Signatures

Files

cea77d070fb4bc4bf37ec7dcb223004f63259e9db19551b9af8a15118582f713
.exe windows x86

9588eb7ea8b355acd9d2c33ad5df71ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
PropVariantClear
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoTaskMemAlloc
CoCreateGuid

oleaut32

SysFreeString
VarUI4FromStr
SysAllocString
VariantCopy
VariantClear

kernel32

HeapFree
LocalAlloc
HeapSize
lstrcmpiW
VirtualAlloc
GetTempFileNameW
CreateFileW
LoadLibraryExW
GlobalFree
HeapAlloc
MoveFileExW
LeaveCriticalSection
GetSystemInfo
FindClose
WaitForMultipleObjects
SetFileTime
SetFileAttributesW
CreateSemaphoreW
OutputDebugStringW
ReleaseSemaphore
SetUnhandledExceptionFilter
VirtualFree
UnhandledExceptionFilter
DeleteFileW
GetTempPathW
FindResourceExW
FindNextFileW
GetLocalTime
FreeLibrary
CreateEventW
LocalFree
DeleteCriticalSection
CopyFileW
WideCharToMultiByte
GetProcessHeap
FindResourceW
FindFirstFileW
RaiseException
HeapDestroy
IsDebuggerPresent
LockResource
SetLastError
GetSystemTimeAsFileTime
GetCurrentThreadId
ReadFile
ResetEvent
RemoveDirectoryW
SizeofResource
lstrlenW
EnterCriticalSection
WriteFile
CloseHandle
GetFileSize
WaitForSingleObject
GetModuleHandleW
HeapReAlloc
GetSystemDefaultLangID
LoadResource
GetFullPathNameA
VirtualAllocEx
GetModuleHandleA

user32

CharLowerW
CharUpperW
CharNextW

winspool.drv

DocumentEvent
StartDocDlgW
SetJobW
ConfigurePortA
AdvancedSetupDialog
EnumJobsW
GetPrinterDriverDirectoryA
CommitSpoolData
EnumPrintersA
EnumPrinterDriversW
GetPrinterA
ResetPrinterW

mciavi32

DriverProc

Sections

.CwSjd
Size: 1024B - Virtual size: 36KB

IMAGE_SCN_MEM_READ

.JdUCfU
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ

.QDfjfAN
Size: 2KB - Virtual size: 17KB

IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.FFHzlH
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CuZXCWO
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pDkS
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tmINPvj
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nmsj
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ibfAw
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sZUUHLj
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KENF
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9588eb7ea8b355acd9d2c33ad5df71ba

Headers

DLL Characteristics

File Characteristics

Imports

ole32

oleaut32

kernel32

user32

winspool.drv

mciavi32

Sections

.CwSjd Size: 1024B - Virtual size: 36KB

.JdUCfU Size: 2KB - Virtual size: 20KB

.QDfjfAN Size: 2KB - Virtual size: 17KB

.text Size: 19KB - Virtual size: 18KB

.FFHzlH Size: 2KB - Virtual size: 1KB

.CuZXCWO Size: 3KB - Virtual size: 2KB

.pDkS Size: 2KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 13KB

.tmINPvj Size: 2KB - Virtual size: 1KB

.rdata Size: 208KB - Virtual size: 207KB

.Nmsj Size: 1KB - Virtual size: 1KB

.ibfAw Size: 3KB - Virtual size: 2KB

.rsrc Size: 17KB - Virtual size: 17KB

.sZUUHLj Size: 2KB - Virtual size: 2KB

.KENF Size: 2KB - Virtual size: 1KB

.CwSjd
Size: 1024B - Virtual size: 36KB

.JdUCfU
Size: 2KB - Virtual size: 20KB

.QDfjfAN
Size: 2KB - Virtual size: 17KB

.text
Size: 19KB - Virtual size: 18KB

.FFHzlH
Size: 2KB - Virtual size: 1KB

.CuZXCWO
Size: 3KB - Virtual size: 2KB

.pDkS
Size: 2KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 13KB

.tmINPvj
Size: 2KB - Virtual size: 1KB

.rdata
Size: 208KB - Virtual size: 207KB

.Nmsj
Size: 1KB - Virtual size: 1KB

.ibfAw
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 17KB - Virtual size: 17KB

.sZUUHLj
Size: 2KB - Virtual size: 2KB

.KENF
Size: 2KB - Virtual size: 1KB