e62ea45f68a7f00ed4790a5974b4fa6ba0562b586a9de277038bffe1127270cb

Sharing

Copy URL

Twitter E-mail

General

Target

e62ea45f68a7f00ed4790a5974b4fa6ba0562b586a9de277038bffe1127270cb
Size

192KB
MD5

114bfbc5f26d61037e92bbc681ca80bc
SHA1

36d6cb02af32f1b45b7206f942036666b75bcb44
SHA256

e62ea45f68a7f00ed4790a5974b4fa6ba0562b586a9de277038bffe1127270cb
SHA512

faff6cdb3913954d490bf598c33504b4495016f388e952e60c8c4564fc3f77706b9b954afcf5bcccb6e9267de84c6069f93bd6d178e67f6059e18744edb83ed4
SSDEEP

3072:veE8RE0C6oa/K7YDlUwweByr5llbI7U4BPTtOK2ffnJ+JTSNaqrUw:GEUm6oaC+JByr5ll87jyK2wAfrU

Score

N/A

Malware Config

Signatures

Files

e62ea45f68a7f00ed4790a5974b4fa6ba0562b586a9de277038bffe1127270cb
.dll windows x86

7b398a3a318f71274d54f35602410c63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalLock
GetProcAddress
GlobalHandle
LoadLibraryA
FreeLibrary
GlobalUnlock
GlobalFree
GetModuleFileNameA
GetEnvironmentVariableA
GetModuleHandleA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReadFile
InitializeCriticalSection
HeapFree
CloseHandle
SetFilePointer
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetVersionExA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetACP
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
SetStdHandle
CreateFileA
VirtualAlloc
HeapReAlloc
RtlUnwind
FlushFileBuffers
GetCPInfo
InterlockedDecrement
GetOEMCP
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedIncrement

winspool.drv

ClosePrinter
GetPrinterA
GetPrinterDriverA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Exports

Exports

EP_CreateLoaderHandle
EP_DeleteLoaderHandle
EP_GetResourceInfo
EP_ReadResourceFile
EP_ReadResourceFileEx
EP_SetAPFSceneID
EP_SetAPFSceneIDEx
EP_SetColorModeID
EP_SetColorSpaceID
EP_SetDevMode
EP_SetDeviceInfo
EP_SetInkID
EP_SetMediaID

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b398a3a318f71274d54f35602410c63

Headers

File Characteristics

Imports

kernel32

winspool.drv

advapi32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 96KB - Virtual size: 92KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 96KB - Virtual size: 92KB

.reloc
Size: 8KB - Virtual size: 4KB