8598471c4b3c0e89c5b9682be1b41c3748c7d28b02e1e16f42a4f3197bceaafa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8598471c4b3c0e89c5b9682be1b41c3748c7d28b02e1e16f42a4f3197bceaafa
Size

112KB
MD5

2ab6b3ff5838b012a918cc017c8a75c0
SHA1

d08c0688c0c3b6de0f03b6f09aae415385019093
SHA256

8598471c4b3c0e89c5b9682be1b41c3748c7d28b02e1e16f42a4f3197bceaafa
SHA512

4f178566f3da0e7473c8e5877c5a177ce37a15b381f76369f68e4fbadeb1733168f15cc1e8f0734c9aba06130f11977968069a8a1b27e79e2352a97d3fa93179
SSDEEP

3072:51l69leYfFHYW/pM5vzCRKeSIx8OElOsvQ:YRY9v4/ElpQ

Score

N/A

Malware Config

Signatures

Files

8598471c4b3c0e89c5b9682be1b41c3748c7d28b02e1e16f42a4f3197bceaafa
.exe windows x86

7f6b7574e91842da6441b7fd27024a95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
CreateWaitableTimerW
SetLastError
GetBinaryTypeW
GetModuleFileNameA
Sleep
CreateNamedPipeA
GetLogicalDriveStringsA
lstrlenA
lstrcmpiA
GetProcessHeap
GetDriveTypeW
HeapCreate
lstrcmpiA
IsValidCodePage
FileTimeToLocalFileTime
EndUpdateResourceW
GetModuleHandleA
WaitForSingleObject
lstrcmpiA
GetStdHandle
lstrcmpiA
SuspendThread

printui

PnPInterface
bPrinterSetup
PrinterPropPageProvider
bFolderRefresh

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrc
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ