818b08d1f1e078e480288e3da793b7603e400854cd310367e180dd4b0b8431c8

General

Target

818b08d1f1e078e480288e3da793b7603e400854cd310367e180dd4b0b8431c8
Size

144KB
MD5

4da4b1b992c8f3957336c9aa2e12778d
SHA1

0f320c0be5b0c7f155fdfb45246808b6c78fea93
SHA256

818b08d1f1e078e480288e3da793b7603e400854cd310367e180dd4b0b8431c8
SHA512

c550bcf6a7cc5d33288e90a50765985ffa32f12a31a545c900a4a08371e6bf41c6850674c7b23fb03f59576fbf4ee5fb23dda428b7de2e953b55b645df2b522d
SSDEEP

3072:6+0wyizurgiUw6NYVWDDfepKtma92gXvX16z+:6+AizurtUwGYVeepK3UgXvX

Score

N/A

Malware Config

Signatures

Files

818b08d1f1e078e480288e3da793b7603e400854cd310367e180dd4b0b8431c8
.exe windows x86

140e34bfd2a23b8dcc64df61db968e34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileSize
SetFilePointer
CreateFileW
DeleteCriticalSection
CreateDirectoryW
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
WriteConsoleW
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
GetSystemTimeAsFileTime

winspool.drv

DocumentPropertiesW
ClosePrinter
GetJobW
EnumPrintersW
OpenPrinterW

userenv

UnloadUserProfile
DestroyEnvironmentBlock
CreateEnvironmentBlock

winmm

timeBeginPeriod
timeEndPeriod
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutOpen

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

140e34bfd2a23b8dcc64df61db968e34

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

userenv

winmm

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 40KB - Virtual size: 423KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 40KB - Virtual size: 423KB

.rsrc
Size: 4KB - Virtual size: 3KB