2f7ab3daa285688c3793bf7a8ec43c00dac30ac5628133233ea1fc148b9eefa5

Sharing

Copy URL Twitter E-mail

General

Target

2f7ab3daa285688c3793bf7a8ec43c00dac30ac5628133233ea1fc148b9eefa5
Size

480KB
MD5

1988f0b10b0e278c2534c82a5ed95ea0
SHA1

bc0372c311f518f27443610dc7df0c4ba8adf28f
SHA256

2f7ab3daa285688c3793bf7a8ec43c00dac30ac5628133233ea1fc148b9eefa5
SHA512

083d1d3cb7c3fc135d6d73fe5cb044ecc816879052012cf01234d27504e40ef6794847c329fca033148a000cda70629eb2e8136a11050a5e6a09c2798e1ca7e9
SSDEEP

12288:9nc+jwaotMYEJleVijvfUViTtfgvNIqpffGxK:TYy3UViTtfgvNIqpWE

Score

N/A

Malware Config

Signatures

Files

2f7ab3daa285688c3793bf7a8ec43c00dac30ac5628133233ea1fc148b9eefa5
.exe windows x86

4cc913a26d444d0a94f93e8dae11aeff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

AddPrintProcessorA
DeletePrinterDriverA
DeletePrinterDriverExA
SetPortA
GetPrinterA
ScheduleJob
AddPortA
ClosePrinter
FlushPrinter
StartPagePrinter
AddPrinterA
GetFormA
AbortPrinter
XcvDataW
ResetPrinterA
WaitForPrinterChange
DeletePortA
OpenPrinterA
DeletePrinter
SetPrinterDataA
DeletePrinterDataExA
AddJobA
DeleteMonitorA
EnumPrinterDataExA
FindClosePrinterChangeNotification
SetFormA
AddFormA
DeletePrinterDataA
DeletePrinterConnectionA
AddPrintProvidorA
PrinterMessageBoxA
EnumPrinterKeyA
GetPrintProcessorDirectoryA
SetJobA
DeletePrinterKeyA
EnumPrintersA
ReadPrinter
DeletePrintProcessorA
SetPrinterDataExA
AddMonitorA
EnumPrinterDataA
EnumPrinterDriversA
ConfigurePortA
GetJobA
StartDocPrinterA
DeleteFormA
DeletePrintProvidorA
WritePrinter

kernel32

GetCurrentProcess
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
SetTapeParameters
GetNativeSystemInfo
CreateSemaphoreA
CloseHandle
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
RtlUnwind
RaiseException
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cc913a26d444d0a94f93e8dae11aeff

Headers

File Characteristics

Imports

winspool.drv

kernel32

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 140KB - Virtual size: 138KB

.data Size: 72KB - Virtual size: 2.9MB

.rsrc Size: 4KB - Virtual size: 448B

.reloc Size: 20KB - Virtual size: 16KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 140KB - Virtual size: 138KB

.data
Size: 72KB - Virtual size: 2.9MB

.rsrc
Size: 4KB - Virtual size: 448B

.reloc
Size: 20KB - Virtual size: 16KB