6a2bd1d7cb016ef69fd6588585d125a85b284225617f86d4a421ac6f419e8a10

Sharing

Copy URL Twitter E-mail

General

Target

6a2bd1d7cb016ef69fd6588585d125a85b284225617f86d4a421ac6f419e8a10
Size

268KB
MD5

9310be44acad947c20efb724c54ae840
SHA1

da3d5096b9b3ebe52ba5f21fac4305ff01e0e8ac
SHA256

6a2bd1d7cb016ef69fd6588585d125a85b284225617f86d4a421ac6f419e8a10
SHA512

e1f0243e9332675a1d5269c297f2007d4fc73657c2fd65ec516c025bcc4ad3b1d879eae4f52949bd1f3628664b578763870638d8aa2ec618571020f8a004aa33
SSDEEP

6144:uU8w49W79D7YBmzCyOmzWWFQcLkeMXCaz151Ybpu/1m:L8w49W793YBdHmzIcAdCc1AtA1m

Score

N/A

Malware Config

Signatures

Files

6a2bd1d7cb016ef69fd6588585d125a85b284225617f86d4a421ac6f419e8a10
.exe windows x86

76575cb0a95926b04e617ccbc91147d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
WideCharToMultiByte
GetLastError
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
FindFirstFileA
FindClose
CreateFileA
GetFileTime
CloseHandle
CompareFileTime
GetWindowsDirectoryA
CreateDirectoryA
GetVersionExA
TerminateProcess
GetFileType
GetStdHandle
SetEndOfFile
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
SetEnvironmentVariableA
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
HeapFree
FlushFileBuffers
WriteFile
HeapAlloc
HeapReAlloc
HeapSize
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStringTypeW
SetUnhandledExceptionFilter
SetFilePointer
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
GetStringTypeA

winspool.drv

EnumPrintersA

advapi32

RegQueryInfoKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

76575cb0a95926b04e617ccbc91147d1

Headers

File Characteristics

Imports

kernel32

winspool.drv

advapi32

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 936B

.4rdata Size: 76KB - Virtual size: 76KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 936B

.4rdata
Size: 76KB - Virtual size: 76KB