f8114179bc8dc6b63049525393a03cd50cbe5eb66f7e82c223433ee51078a174

Sharing

Copy URL Twitter E-mail

General

Target

f8114179bc8dc6b63049525393a03cd50cbe5eb66f7e82c223433ee51078a174
Size

177KB
MD5

0b2f62e898f497af583594fba1233626
SHA1

eba8d74f58dae2322e00c74a4bd05cd03ada6c7d
SHA256

f8114179bc8dc6b63049525393a03cd50cbe5eb66f7e82c223433ee51078a174
SHA512

c2d4f5cba1739bd20668ef004f5d0cc67079f0a346dc22568691e138e62faad000f3ece0ae913d492c5e9f1ce7ca9d596d7843c335a03946fb326fab3d89c1e6
SSDEEP

3072:RqkZAuRjyEr1E7yz8LD+H3fBbx08uKg/KxNmFkJ810s:4kZLyhy/HZLp

Score

N/A

Malware Config

Signatures

Files

f8114179bc8dc6b63049525393a03cd50cbe5eb66f7e82c223433ee51078a174
.exe windows x86

332bab37bb9ca7bc7501ea1ee27be263

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
CreateEventW
GetLastError
CreateThread
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WaitForMultipleObjects
WaitForSingleObject
DeleteCriticalSection
WideCharToMultiByte
GetModuleFileNameW
lstrcpynW
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSection
Sleep
SystemTimeToFileTime
MultiByteToWideChar
CompareFileTime
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
RaiseException
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapSize
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwind
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetUserNameW

user32

LoadStringW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
SetTimer
PostMessageW
EndPaint
GetClientRect
BeginPaint
RegisterClassExW
LoadIconW
LoadCursorW
CreateWindowExW
KillTimer
PostQuitMessage
DialogBoxParamW
EndDialog
FindWindowW
MessageBoxW
DestroyIcon
DefWindowProcW
DestroyWindow

winspool.drv

ClosePrinter
FindClosePrinterChangeNotification
FreePrinterNotifyInfo
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumJobsW
OpenPrinterW
GetPrinterW

shell32

Shell_NotifyIconW

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

ws2_32

gethostname
WSACleanup
WSAStartup
gethostbyname
inet_ntoa

psct4510

?UpdateJob@CPrintingScout@@QAEHPAGHHH@Z
??1CPrintingScout@@QAE@XZ
?MonitorJob@CPrintingScout@@QAEHPAG0HHW4_REDIRECT@@@Z
??0CPrintingScout@@QAE@PAUHWND__@@PAGW4_DRIVERTYPE@@1W4CONNECTION_TYPE@@@Z
?CancelJob@CPrintingScout@@QAEHPAG@Z
?CancelAllJobs@CPrintingScout@@QAEHXZ
?GetActiveThreadCount@CPrintingScout@@QAEHXZ

Exports

Exports

??4CPrintingScout@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

332bab37bb9ca7bc7501ea1ee27be263

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

winspool.drv

shell32

ole32

ws2_32

psct4510

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 70KB

.data Size: 75KB - Virtual size: 88KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 75KB - Virtual size: 88KB

.rsrc
Size: 29KB - Virtual size: 29KB