81371aba645a474ca88fba730677b1ca0e5c3618ac96eb2ee7476c95d5165f32

General

Target

81371aba645a474ca88fba730677b1ca0e5c3618ac96eb2ee7476c95d5165f32
Size

87KB
MD5

fef838005e81ec5804be891d8b692e06
SHA1

6495d06d28f71789f8376cd2c7d8535fbf766cfa
SHA256

81371aba645a474ca88fba730677b1ca0e5c3618ac96eb2ee7476c95d5165f32
SHA512

53e5499ef427e75cb0740cfef2072c089a581ae7bfa736030fe4fb7eab3ecb8ee8d9e12700b624ba9c3205b7d23a78e04e9b4aeaa9172815fe99fff92b366d16
SSDEEP

1536:3cE8z5jXF9XZTNfMP19SSxtU9fdShaNGhgs+HQIbq92:3cE8Vj11Ud9LqkhaNPsgu2

Score

N/A

Malware Config

Signatures

Files

81371aba645a474ca88fba730677b1ca0e5c3618ac96eb2ee7476c95d5165f32
.dll windows x86

97e01cad228cc06d74c5de0a49f18679

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
_amsg_exit
_initterm
free
malloc
_XcptFilter
wcsrchr
_wcsicmp
_wtoi
wcsstr
_vsnwprintf

kernel32

WaitForSingleObject
CreateMutexW
CreateProcessW
CloseHandle
MultiByteToWideChar
Sleep
OutputDebugStringW
FindClose
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
InterlockedExchange
ReleaseMutex
GetLastError
FindFirstFileW
GetModuleHandleW
GetModuleFileNameW

winspool.drv

GetPrinterDriverDirectoryW

advapi32

RegCloseKey
RegOpenKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegQueryValueExW

msi

ord45
ord205
ord8
ord70
ord160
ord159
ord32
ord92
ord118

Exports

Exports

InstallEacBidiComponents

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97e01cad228cc06d74c5de0a49f18679

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

winspool.drv

advapi32

msi

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 65KB - Virtual size: 65KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 65KB - Virtual size: 65KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB