8da133f385f41f3b824f43064ffb793bedc4c262975d47cced52c12a9261bbcb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8da133f385f41f3b824f43064ffb793bedc4c262975d47cced52c12a9261bbcb
Size

58KB
MD5

218299fc5dad315502251bd911c27cf8
SHA1

f0a779dde376c10b6f2aa11eb6bf3848ee6396e5
SHA256

8da133f385f41f3b824f43064ffb793bedc4c262975d47cced52c12a9261bbcb
SHA512

42977d966ac03a5753eccac8de96ff5d46500a174d513b65c019049378fe2fc5797fec4bb0a647c39ca16faba21bce8e6cd0e1021572f11d62ce927332753ba5
SSDEEP

1536:OmNpt38+dClA4tfSleDEFKNkzhH4xxrlhMHZyDDnP4EfCVau:Omx37oiuqHFLhH4nMHZsbPKVa

Score

N/A

Malware Config

Signatures

Files

8da133f385f41f3b824f43064ffb793bedc4c262975d47cced52c12a9261bbcb
.exe windows x86

e0eb4f7dc3ed7e41bab7a6d0dc1322f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetBinaryTypeW
GetExitCodeProcess
lstrlenA
lstrcmpiA
IsValidCodePage
GetModuleFileNameA
GetLogicalDrives
lstrcmpiA
CreateWaitableTimerW
SetLastError
HeapCreate
EndUpdateResourceW
lstrcmpiA
SuspendThread
CreateNamedPipeA
lstrcmpiA
FileTimeToLocalFileTime
lstrcmpiA
GetDriveTypeA
Sleep
GetModuleHandleA
GetStdHandle

printui

bPrinterSetup
ConstructPrinterFriendlyName
bFolderRefresh
PnPInterface

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE