96d22122c5dde2eea54f5e56b8d7df01f745cb387730fc5e768bd3d16f782f06

General

Target

96d22122c5dde2eea54f5e56b8d7df01f745cb387730fc5e768bd3d16f782f06
Size

244KB
MD5

b828532f60e9749ab4a182a4e29d4c70
SHA1

59508c692707c9cc5d9df925cc6a91763ce806f8
SHA256

96d22122c5dde2eea54f5e56b8d7df01f745cb387730fc5e768bd3d16f782f06
SHA512

053e79297a4e0da1b7c2b8a57861901e4fc5502fcf27f968cb046ef77df19127acceed0209b918cf5519a7cd89cc2efdc561a5413c9e7e6d86ce68af754ad058
SSDEEP

6144:Kz/K2yscdNPqT5FgYp8n/mNGJXgFDAWJeUhlYkP4lPBHoWwZ1U:oyddpq9FgYGnlQFNJ9lYkP4ZCbU

Score

N/A

Malware Config

Signatures

Files

96d22122c5dde2eea54f5e56b8d7df01f745cb387730fc5e768bd3d16f782f06
.exe windows x86

1584f78b6df5d8ef533c00cfdba7811f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoSuspendClassObjects
CoRevokeClassObject

advapi32

RegRestoreKeyA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegQueryValueA
RegQueryValueExA
RegQueryMultipleValuesA
RegSetValueExA
RegCreateKeyExA

kernel32

ResumeThread
GetModuleFileNameA
GetStartupInfoA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetProcAddress
OpenEventA
LocalHandle
TlsGetValue
GetEnvironmentStrings
ReleaseSemaphore
GetACP
CloseHandle
LCMapStringA
GetCommandLineA
QueryPerformanceCounter
TlsSetValue
VirtualAlloc
LocalLock
GetProcessHeap
CreateSemaphoreA
GetModuleHandleA
GetEnvironmentVariableA

winspool.drv

AddJobA
DeletePrinterConnectionA
AddFormA
AbortPrinter
AdvancedDocumentPropertiesA
AddPrinterConnectionA
DeleteFormA
DeletePrinter
DeletePrinterDataA

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_exit
_XcptFilter

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1584f78b6df5d8ef533c00cfdba7811f

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 210KB - Virtual size: 210KB

.data Size: 512B - Virtual size: 332KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 210KB - Virtual size: 210KB

.data
Size: 512B - Virtual size: 332KB

.rsrc
Size: 19KB - Virtual size: 19KB