020c6dd34489d25294fcd8225137583cf8e02563aded157339bfb40e816464dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

020c6dd34489d25294fcd8225137583cf8e02563aded157339bfb40e816464dc
Size

113KB
MD5

965e3470f9244a958cead7553ceb533f
SHA1

5f17f9cb4794b08e05c4a9ef17b3f1aa931bed07
SHA256

020c6dd34489d25294fcd8225137583cf8e02563aded157339bfb40e816464dc
SHA512

64375aa7ea212e218b97e58570380160125735c2e9f6dbacee388bf6531b02a92f18fddbb52e2bd525f1cace0a75ea17a7940b1467016d6e121b25620037885d
SSDEEP

3072:IZeFZrJiyh3RRSM4ImtakU4NyJtARfXjQBIMTDYn0w:znRpmUmyJORfXMBIw6

Score

N/A

Malware Config

Signatures

Files

020c6dd34489d25294fcd8225137583cf8e02563aded157339bfb40e816464dc
.exe windows x86

312d4d20085e1a85c8e88e0fe0021b73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
lstrcmpiA
GetExitCodeProcess
SuspendThread
lstrcmpiA
CreateWaitableTimerW
lstrcmpiA
FileTimeToLocalFileTime
GetBinaryTypeW
SetLastError
lstrcmpiA
lstrcmpiA
GetModuleHandleA
Sleep
IsValidCodePage
EndUpdateResourceW
lstrlenA
GetDriveTypeW
CreateNamedPipeA
GetLogicalDriveStringsA
HeapCreate
GetModuleFileNameA
GetProcessHeap

printui

PnPInterface
bFolderRefresh
bPrinterSetup
ConstructPrinterFriendlyName

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ