fec5387817741bb10792e919f6314aca7444e9accff65fe26fd7e6542c24123c

Sharing

Copy URL Twitter E-mail

General

Target

fec5387817741bb10792e919f6314aca7444e9accff65fe26fd7e6542c24123c
Size

106KB
MD5

92c05d8ee7fd510fda8c326abe35000c
SHA1

b8732c2bedfe57041ee91989a876d214e1c7c66d
SHA256

fec5387817741bb10792e919f6314aca7444e9accff65fe26fd7e6542c24123c
SHA512

9abfe2a0d26ac66cffda13473d20362e2294ee9d36b6bb16ab7872b4f98eba8245f6663aec29326c53bf90242b9a186b92e0da73371ab2bf6dafc3f2166619a6
SSDEEP

1536:XsnMftrwfwFR/d9CUdibSMEuwKVHOQkcrV2WNLKB9WaJHiiR01Fuwfm:XsnMVz/9iERsRne9WGx0fv

Score

N/A

Malware Config

Signatures

Files

fec5387817741bb10792e919f6314aca7444e9accff65fe26fd7e6542c24123c
.dll windows x86

c47912946b1c86fd9f87b92089d10a01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_callnewh
free
?what@exception@@UBEPBDXZ
_errno
__CxxFrameHandler
strncmp
memmove
strstr
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
_vsnwprintf
_vsnprintf
_strnicmp
memchr
memset
malloc
memcpy

kernel32

lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDBCSLeadByte
MultiByteToWideChar
WaitForSingleObject
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersionExA
SetLastError
GetCurrentThreadId
SetFilePointer
WriteFile
SetEndOfFile
CreateFileA
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
CreateEventA
CreateThread
WaitForMultipleObjects
DeleteCriticalSection
GetTickCount
GetLastError
EnterCriticalSection
LeaveCriticalSection
CloseHandle
SetEvent

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

user32

CharUpperA

winspool.drv

ClosePrinter
OpenPrinterA
GetPrinterDriverA
GetPrinterA
GetPrinterDataExA

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance

mpr

WNetGetConnectionA

Exports

Exports

EBPGetProviderInfo

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c47912946b1c86fd9f87b92089d10a01

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

winspool.drv

ole32

mpr

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.data Size: 62KB - Virtual size: 63KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 39KB - Virtual size: 38KB

.data
Size: 62KB - Virtual size: 63KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 2KB - Virtual size: 2KB