b40d8419ef243bfd1e75b1d279b346950c8a6ac8f5f15fe6dfbc7ece82ee6379

General

Target

b40d8419ef243bfd1e75b1d279b346950c8a6ac8f5f15fe6dfbc7ece82ee6379
Size

335KB
MD5

79e6e8c203f51d511174675f9d14bb3e
SHA1

7e7b03e3729a3aca8482e3ea2b4f778611994056
SHA256

b40d8419ef243bfd1e75b1d279b346950c8a6ac8f5f15fe6dfbc7ece82ee6379
SHA512

b7eb8f2604b4903eecba1a4ccae59a994e2183e04bd578115b8bdfe42c85e6c0529fd7d936873d6a5d13f0dc7c583a11b85a75ab6dfe2eb655dbde07bf2687d0
SSDEEP

6144:z26CqlYjXBy27mb1rhYzeIb//cH5734Py5T+eATL6GDXl:zPzYjXM2Kr2zD1y5TBa6GD1

Score

N/A

Malware Config

Signatures

Files

b40d8419ef243bfd1e75b1d279b346950c8a6ac8f5f15fe6dfbc7ece82ee6379
.exe windows x86

31a02fdd0f272b2cb0ae6e05c8e9d922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoRegisterClassObject
StgOpenPropStg

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegFlushKey
RegRestoreKeyA
RegQueryMultipleValuesA
RegSetValueA
RegNotifyChangeKeyValue
RegEnumKeyA
RegCreateKeyA
RegOverridePredefKey
RegCreateKeyExA

kernel32

GetModuleFileNameA
GetCommandLineA
WritePrivateProfileStringA
WritePrivateProfileStructA
WriteProfileStringA
GetProcAddress
VirtualAlloc
ReleaseSemaphore
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetStdHandle
GetStartupInfoA
SuspendThread
ResetEvent
ReleaseMutex
ResumeThread
PulseEvent
OpenEventA
OpenSemaphoreA
GetEnvironmentStrings
GetModuleHandleA
QueryPerformanceCounter
GlobalLock

winspool.drv

DeleteFormA
DeletePrinter
ClosePrinter
DeletePrinterConnectionA
ConnectToPrinterDlg
AdvancedDocumentPropertiesA
ConfigurePortA
DeletePrinterDataA
DeletePrinterKeyA
AddPrinterA
AddFormA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_exit

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31a02fdd0f272b2cb0ae6e05c8e9d922

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 315KB - Virtual size: 314KB

.data Size: 512B - Virtual size: 94KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 315KB - Virtual size: 314KB

.data
Size: 512B - Virtual size: 94KB

.rsrc
Size: 5KB - Virtual size: 5KB