b798c44bc821f42ee238cc47ad0e492906cdb4d59a3dc88fee3bcf7f5472f1b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b798c44bc821f42ee238cc47ad0e492906cdb4d59a3dc88fee3bcf7f5472f1b0
Size

297KB
MD5

3927e8220ee01c4fc9ab15a0760b4150
SHA1

853ff96908d9fce12bf5db97ffcc4d79568d38fe
SHA256

b798c44bc821f42ee238cc47ad0e492906cdb4d59a3dc88fee3bcf7f5472f1b0
SHA512

f4ee7daf4983c5026a32599b22ff2e0a9349a0a52b2186fc84372f4a9e9b47c5a5c31cad30c4aa7aa3d1c9470b23055cf623f8ed25bc5177ac12782d3894794a
SSDEEP

6144:Zhbvla5Hke0zApW5uQL/hHxx5cqoHUGbVJ8d:zMkeWgQL/p5dStw

Score

N/A

Malware Config

Signatures

Files

b798c44bc821f42ee238cc47ad0e492906cdb4d59a3dc88fee3bcf7f5472f1b0
.exe windows x86

a397aee5baaafcdfab21106c464a9184

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetModuleHandleA
GetModuleFileNameA
GetBinaryTypeW
CreateWaitableTimerW
SetLastError
lstrcmpiA
lstrcmpiA
CreateNamedPipeA
GetProcessHeap
SuspendThread
GetStdHandle
IsValidCodePage
lstrcmpiA
GetDriveTypeA
HeapCreate
GetExitCodeProcess
EndUpdateResourceW
FileTimeToLocalFileTime
Sleep
lstrlenA
lstrcmpiA
GetLogicalDrives

printui

bPrinterSetup
bFolderRefresh
ConstructPrinterFriendlyName
PnPInterface

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE