4256ca33d78a8f5dc070671d0098cd9997799e0d9c0b36314fcb748d1d19e836

General

Target

4256ca33d78a8f5dc070671d0098cd9997799e0d9c0b36314fcb748d1d19e836
Size

288KB
MD5

e95093e96aa2068f0647a7b5a4541a8b
SHA1

5db20e762fe3ed409a10b37b0de919c7a249e50b
SHA256

4256ca33d78a8f5dc070671d0098cd9997799e0d9c0b36314fcb748d1d19e836
SHA512

b2cc86c5ec18515eb73514fc379d39c24bddb4bac6d03e4cc003fe54a2fe881f4600b7a4078937b0c6f4f1012630d451a8fc1fe57bfe88776b745cc5e3fd3c6b
SSDEEP

6144:cKZuwAB6rCbXDepO7ukvmnrmZ2g5CG55199Cq0F9gh+vH8Caa:cKZuvB6WbXCpIukIqZ2g5CGtH19Ca

Score

N/A

Malware Config

Signatures

Files

4256ca33d78a8f5dc070671d0098cd9997799e0d9c0b36314fcb748d1d19e836
.exe windows x86

1330393e5f5bd487bfbcaf3f5905260c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
ioctlsocket
listen
ntohl
inet_addr
recv
send
socket

winspool.drv

DeletePrinterConnectionA
AddPrinterConnectionA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

kernel32

SetStdHandle
CloseHandle
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCommandLineA
SetSystemPowerState
GetCPInfo
FlushFileBuffers
CreateEventA
LocalFree
LocalAlloc
SetEvent
GetCurrentProcess
LoadLibraryA
FindClose
FindNextFileA
FindFirstFileA
TlsGetValue
TlsAlloc
WriteConsoleW
VirtualProtect
BeginUpdateResourceA
GetSystemInfo
GetVolumeInformationA
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1330393e5f5bd487bfbcaf3f5905260c

Headers

File Characteristics

Imports

ws2_32

winspool.drv

kernel32

Sections

.text Size: 96KB - Virtual size: 92KB

.rdata Size: 88KB - Virtual size: 84KB

.data Size: 88KB - Virtual size: 451KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 96KB - Virtual size: 92KB

.rdata
Size: 88KB - Virtual size: 84KB

.data
Size: 88KB - Virtual size: 451KB

.reloc
Size: 12KB - Virtual size: 10KB