c5710c07fd27d9b3c9830c487f3f1137b990e97bd4a49d1c6ca4870bc0aee44a

Sharing

Copy URL Twitter E-mail

General

Target

c5710c07fd27d9b3c9830c487f3f1137b990e97bd4a49d1c6ca4870bc0aee44a
Size

177KB
MD5

84f19c8faf0660c4b6fbf3edd7b25569
SHA1

00f729dcbb11785e487bc6313a05d0f27ec41f13
SHA256

c5710c07fd27d9b3c9830c487f3f1137b990e97bd4a49d1c6ca4870bc0aee44a
SHA512

84ca91511644ecad2fe1ce029db02e7940805ace7912fe086283eca355137ea29face8a4553ede8342cd13b85b0a63d85003b7d706e86635d4044fc2fcb6fa91
SSDEEP

3072:xkkMst6nSWr2yysKLsmvvLD/yGpISChJ810s:6kMpSayGmvzLyGpMh

Score

N/A

Malware Config

Signatures

Files

c5710c07fd27d9b3c9830c487f3f1137b990e97bd4a49d1c6ca4870bc0aee44a
.exe windows x86

332bab37bb9ca7bc7501ea1ee27be263

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
CreateEventW
GetLastError
CreateThread
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WaitForMultipleObjects
WaitForSingleObject
DeleteCriticalSection
WideCharToMultiByte
GetModuleFileNameW
lstrcpynW
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSection
Sleep
SystemTimeToFileTime
MultiByteToWideChar
CompareFileTime
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
RaiseException
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapSize
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwind
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetUserNameW

user32

LoadStringW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
SetTimer
PostMessageW
EndPaint
GetClientRect
BeginPaint
RegisterClassExW
LoadIconW
LoadCursorW
CreateWindowExW
KillTimer
PostQuitMessage
DialogBoxParamW
EndDialog
FindWindowW
MessageBoxW
DestroyIcon
DefWindowProcW
DestroyWindow

winspool.drv

ClosePrinter
FindClosePrinterChangeNotification
FreePrinterNotifyInfo
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumJobsW
OpenPrinterW
GetPrinterW

shell32

Shell_NotifyIconW

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

ws2_32

gethostname
WSACleanup
WSAStartup
gethostbyname
inet_ntoa

psct4510

?UpdateJob@CPrintingScout@@QAEHPAGHHH@Z
??1CPrintingScout@@QAE@XZ
?MonitorJob@CPrintingScout@@QAEHPAG0HHW4_REDIRECT@@@Z
??0CPrintingScout@@QAE@PAUHWND__@@PAGW4_DRIVERTYPE@@1W4CONNECTION_TYPE@@@Z
?CancelJob@CPrintingScout@@QAEHPAG@Z
?CancelAllJobs@CPrintingScout@@QAEHXZ
?GetActiveThreadCount@CPrintingScout@@QAEHXZ

Exports

Exports

??4CPrintingScout@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

332bab37bb9ca7bc7501ea1ee27be263

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

winspool.drv

shell32

ole32

ws2_32

psct4510

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 70KB

.data Size: 75KB - Virtual size: 88KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 75KB - Virtual size: 88KB

.rsrc
Size: 29KB - Virtual size: 29KB