5e852619f46aa09e34cb45960733c1ef10fdca00331cb06714105cf49582406f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e852619f46aa09e34cb45960733c1ef10fdca00331cb06714105cf49582406f
Size

58KB
MD5

cb3e17bbb3e6848f8cc5581bc0cdf8fa
SHA1

af1c7111a6bae071c6f4264b3c3e1371d3559b57
SHA256

5e852619f46aa09e34cb45960733c1ef10fdca00331cb06714105cf49582406f
SHA512

0da8e713695c3afa0eda8a5ec61c120e548f8f93d7bcf5941e8317c126bf19600dae71b9417b2b751dc591abc73dd296d1821e10d5934e445a5ec77e8ac33aa6
SSDEEP

1536:6dnI3vCj5towa9lDJyEBXGskUoyotJH3YiIEDNPpS8au:6dneKn9WrtEUoyziBXS8a

Score

N/A

Malware Config

Signatures

Files

5e852619f46aa09e34cb45960733c1ef10fdca00331cb06714105cf49582406f
.exe windows x86

ec1b6439ebb1182917afd0a320408b56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
GetLogicalDrives
SuspendThread
lstrcmpiA
GetModuleHandleA
CreateNamedPipeA
GetStdHandle
EndUpdateResourceW
lstrlenA
GetExitCodeProcess
GetModuleFileNameA
lstrcmpiA
HeapCreate
GetDriveTypeA
lstrcmpiA
lstrcmpiA
SetLastError
FileTimeToLocalFileTime
IsValidCodePage
CreateWaitableTimerW
lstrcmpiA
GetProcessHeap
Sleep

printui

bFolderRefresh
ConstructPrinterFriendlyName
PnPInterface
bPrinterSetup

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE