5e9dc863f8de38b6f53d27ae5c62270d6a5a2e26f5615b373baf188e1ca00af4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e9dc863f8de38b6f53d27ae5c62270d6a5a2e26f5615b373baf188e1ca00af4
Size

58KB
MD5

3205ec9d5971a15b4adee1558211a100
SHA1

6441f49fc491c95c6522cfd0f31e062b7a13b863
SHA256

5e9dc863f8de38b6f53d27ae5c62270d6a5a2e26f5615b373baf188e1ca00af4
SHA512

d7a5992fe1c2c2e94a2b7f612706e923954f434f756407ad3f778c58e938f702841cf51132c602a4a61146ef1e9d672bd2f640f00af5e3ba20729ba7c35fb584
SSDEEP

1536:ed53G+ibTT6MGs3IhH+aKlS0JM3WFdJUZc8au:ed53WbT1keaKk0JM+z8a

Score

N/A

Malware Config

Signatures

Files

5e9dc863f8de38b6f53d27ae5c62270d6a5a2e26f5615b373baf188e1ca00af4
.exe windows x86

dd5994f650eec7568598ab937a213b93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
lstrcmpiA
lstrlenA
GetModuleHandleA
CreateWaitableTimerW
lstrcmpiA
lstrcmpiA
SetLastError
lstrcmpiA
GetExitCodeProcess
CreateNamedPipeA
HeapCreate
Sleep
GetLogicalDrives
FileTimeToLocalFileTime
GetStdHandle
GetProcessHeap
lstrcmpiA
EndUpdateResourceW
GetModuleFileNameA
GetDriveTypeA
SuspendThread
IsValidCodePage

printui

PnPInterface
bPrinterSetup
bFolderRefresh
ConstructPrinterFriendlyName

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE