906603ae228031a5fd5b05f0ce4bae2e7c9f290d6fe709c03de8a33302776d14

General

Target

906603ae228031a5fd5b05f0ce4bae2e7c9f290d6fe709c03de8a33302776d14
Size

244KB
MD5

56ff349abef1bfb2a04fb1e0993d1d18
SHA1

6eea35b031d9d1c65bb760553a69a0766e0cd034
SHA256

906603ae228031a5fd5b05f0ce4bae2e7c9f290d6fe709c03de8a33302776d14
SHA512

43e754d2a0281b665ee9d7a00925e02e14ecba4be2c8d4ea778bae74f167629bf60ca72401b8b8990ac7b20a7347c983e992988e962e15c79ac3decbb0b9bc7d
SSDEEP

6144:+okwV48fXmk498KUf7po/MkMFEyRC8ZJfXFZ:+HwBPi8t7po/MkMFi8v1

Score

N/A

Malware Config

Signatures

Files

906603ae228031a5fd5b05f0ce4bae2e7c9f290d6fe709c03de8a33302776d14
.exe windows x86

31a02fdd0f272b2cb0ae6e05c8e9d922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoRegisterClassObject
StgOpenPropStg

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegFlushKey
RegRestoreKeyA
RegQueryMultipleValuesA
RegSetValueA
RegNotifyChangeKeyValue
RegEnumKeyA
RegCreateKeyA
RegOverridePredefKey
RegCreateKeyExA

kernel32

GetModuleFileNameA
GetCommandLineA
WritePrivateProfileStringA
WritePrivateProfileStructA
WriteProfileStringA
GetProcAddress
VirtualAlloc
ReleaseSemaphore
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetStdHandle
GetStartupInfoA
SuspendThread
ResetEvent
ReleaseMutex
ResumeThread
PulseEvent
OpenEventA
OpenSemaphoreA
GetEnvironmentStrings
GetModuleHandleA
QueryPerformanceCounter
GlobalLock

winspool.drv

DeleteFormA
DeletePrinter
ClosePrinter
DeletePrinterConnectionA
ConnectToPrinterDlg
AdvancedDocumentPropertiesA
ConfigurePortA
DeletePrinterDataA
DeletePrinterKeyA
AddPrinterA
AddFormA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_exit

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31a02fdd0f272b2cb0ae6e05c8e9d922

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 210KB - Virtual size: 210KB

.data Size: 512B - Virtual size: 331KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 210KB - Virtual size: 210KB

.data
Size: 512B - Virtual size: 331KB

.rsrc
Size: 19KB - Virtual size: 19KB