0312624dc119632a65d74804687c82a3379cffde6e147fcb294e25f2bf482201

General

Target

0312624dc119632a65d74804687c82a3379cffde6e147fcb294e25f2bf482201
Size

53KB
MD5

ec5dadc36aff67d20abd10c3d7117eb7
SHA1

15815ae807f46dee9b009e3e3643bdc5abeb9b5e
SHA256

0312624dc119632a65d74804687c82a3379cffde6e147fcb294e25f2bf482201
SHA512

af839c86f0141b8bd3be393fd518ccdd85229e7e4a7fe3e9a4703c5d053862063d40e19cf882340b34cc3c48617f7f05476b9c8ce88f2e25d6850379f68f8488
SSDEEP

768:yQZqylJg7pU5RYP6SRCJlcVPNB7lfsZVFnuKjmIjnzP98LZ0lOFV:yaHJJ5RYP6SRwlcV19lgRjm+zWLZ0lO

Score

N/A

Malware Config

Signatures

Files

0312624dc119632a65d74804687c82a3379cffde6e147fcb294e25f2bf482201
.exe windows x86

5d0cb3ea2509d3552f2fd9562f5315b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LocalAlloc
LocalHandle
LocalFree
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
lstrcpyA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetProcAddress
HeapAlloc
VirtualAlloc
LoadLibraryA

winspool.drv

EnumPrintersA

advapi32

RegFlushKey
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fxppvvx
Size: 84KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

awfzknu
Size: 4KB - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5d0cb3ea2509d3552f2fd9562f5315b0

Headers

File Characteristics

Imports

kernel32

winspool.drv

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 823B

.data Size: 9KB - Virtual size: 10KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 28KB - Virtual size: 29KB

fxppvvx Size: 84KB - Virtual size: 112KB

awfzknu Size: 4KB - Virtual size: 84KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 823B

.data
Size: 9KB - Virtual size: 10KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 28KB - Virtual size: 29KB

fxppvvx
Size: 84KB - Virtual size: 112KB

awfzknu
Size: 4KB - Virtual size: 84KB