09bdf31bf4bc995cca22e3e361c2a1438b9449a230e7acd62d557bc3338b3a0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09bdf31bf4bc995cca22e3e361c2a1438b9449a230e7acd62d557bc3338b3a0b
Size

297KB
MD5

294365b88ba9030d654e61b247102560
SHA1

510888b47663e235482bc307fe4b31776a00d2cf
SHA256

09bdf31bf4bc995cca22e3e361c2a1438b9449a230e7acd62d557bc3338b3a0b
SHA512

e77035b73edc45c1a11237ef7fc0a80b591a9c6d43756a1720f33d4212e9250301d7f89f0fa99a9555f3a5d5c8a3518026e8307d62e042cc8e0e48e75c545adb
SSDEEP

6144:3hF28raYXiRBbSJqFI+Qmo2cO8SDSwzxdFfBT:3hF2DBb+CMWDSwzxdT

Score

N/A

Malware Config

Signatures

Files

09bdf31bf4bc995cca22e3e361c2a1438b9449a230e7acd62d557bc3338b3a0b
.exe windows x86

188fcf877156610aafd8136466118a23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetLogicalDriveStringsA
GetDriveTypeW
GetProcessHeap
FileTimeToLocalFileTime
lstrcmpiA
GetModuleHandleA
GetBinaryTypeW
GetStdHandle
WaitForSingleObject
IsValidCodePage
CreateWaitableTimerW
lstrcmpiA
CreateNamedPipeA
EndUpdateResourceW
GetModuleFileNameA
SetLastError
lstrlenA
lstrcmpiA
lstrcmpiA
SuspendThread
HeapCreate
Sleep

printui

bFolderRefresh
PrinterPropPageProvider
bPrinterSetup
PnPInterface

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrc
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ