3c17e62d3e29b2c2a86f80a0d0a28e1704a34df4878466aea62fb43246b0822b

General

Target

3c17e62d3e29b2c2a86f80a0d0a28e1704a34df4878466aea62fb43246b0822b
Size

153KB
MD5

41b15863ed25f8bda90410e414de39ee
SHA1

222266ff04dcc31bd0ebdfc4731dc26236a84914
SHA256

3c17e62d3e29b2c2a86f80a0d0a28e1704a34df4878466aea62fb43246b0822b
SHA512

cb31470162e03f09552cc2571f6ad152adbf4b377aa40ff76428a5f91a5129d62518664061404e18f62422fe8949157380148c5c00301967aee1b986ec455e0f
SSDEEP

1536:e0e2UtDfZKrHmQlPNB4mxiLpbibh9rOx6gtTt9ddMEKiDCGBcVwRDh49tTm8jNoM:eNdtDf0jiDkDF

Score

N/A

Malware Config

Signatures

Files

3c17e62d3e29b2c2a86f80a0d0a28e1704a34df4878466aea62fb43246b0822b
.exe windows x86

0e9ffab043d80dd0fd216570de822c10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
HeapSize
SetStdHandle
CreateFileW
ResumeThread
CloseHandle
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
GetConsoleMode
VirtualAlloc
GetProcAddress
GetLastError
TerminateProcess
Sleep
LoadLibraryW
GetModuleHandleW
GetCurrentProcess
ExitProcess
GetConsoleCP
HeapReAlloc
RtlUnwind
IsValidCodePage
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
GetCPInfo
GetACP
GetOEMCP

winspool.drv

SetJobA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e9ffab043d80dd0fd216570de822c10

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 25KB - Virtual size: 24KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 25KB - Virtual size: 24KB