a6ad4adc8913f9ffece83d2bb463f9cb00dfec0ee9bbecec2a41f9781f3a678d

General

Target

a6ad4adc8913f9ffece83d2bb463f9cb00dfec0ee9bbecec2a41f9781f3a678d
Size

135KB
MD5

881050e5144b613e6752866e424c069f
SHA1

4f93449dfc0db26c75d002a0b91b5ee260069dff
SHA256

a6ad4adc8913f9ffece83d2bb463f9cb00dfec0ee9bbecec2a41f9781f3a678d
SHA512

ac134edcc57192bea62e491a750a74133b6f1a8b82a848facc9fefb3e00a3b21bdf614d100ee4fbc5dcc0cd241c5c93b462d09908b8703e856c739bd44428d1a
SSDEEP

3072:LCLWAEuGbyTU3COTnF+mLO2Yk2O/B60HVH:LCLWAEDyTU3ZVj7DHVH

Score

N/A

Malware Config

Signatures

Files

a6ad4adc8913f9ffece83d2bb463f9cb00dfec0ee9bbecec2a41f9781f3a678d
.exe windows x86

811f8c2cf729677146ea9c504cc8a8e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
ExitProcess
CloseHandle
GetProcAddress
GetModuleHandleA
lstrlenA
HeapFree
Sleep
ContinueDebugEvent
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc

winspool.drv

AddPrinterDriverA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

811f8c2cf729677146ea9c504cc8a8e0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

comdlg32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 16KB - Virtual size: 16KB