afec7e8c32b6107ef85742545241899be0bc99ac80ce67755b92ccf3de1ed684

General

Target

afec7e8c32b6107ef85742545241899be0bc99ac80ce67755b92ccf3de1ed684
Size

288KB
MD5

4d2521a2901ffd2b27b54f7b8237c6e9
SHA1

bc27a6b4b32250ed1660e73fbdb597599259e90b
SHA256

afec7e8c32b6107ef85742545241899be0bc99ac80ce67755b92ccf3de1ed684
SHA512

00fd7067eeb81d912c26a948e0ce5e6938fd2b6369f4e27b292de71e81274b4db0066722da2f067ca7aad639b3bf5933452d89fcc8cd9ce886a34692827d0632
SSDEEP

6144:uT+nDVO9u2oO3RrAzUsb9WUHOuMXFUjyDo5HcMZsLF6pxx:uTwDV92oopAzPhWsOuMXFIZs6h

Score

N/A

Malware Config

Signatures

Files

afec7e8c32b6107ef85742545241899be0bc99ac80ce67755b92ccf3de1ed684
.exe windows x86

bd709e7dd95f0b77ddef2dfd8457ea79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetCommandLineA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetLocalTime
ExitProcess
GetModuleHandleA
GetTickCount
VirtualAllocEx
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
RaiseException
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
GetStartupInfoA
GetCPInfo
HeapAlloc
LCMapStringA
GetLastError
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetFileAttributesW
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
VirtualQuery
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualProtect
GetSystemInfo
SetStdHandle
CreateFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetLocaleInfoW
SetEnvironmentVariableW

winspool.drv

DocumentPropertiesW

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd709e7dd95f0b77ddef2dfd8457ea79

Headers

File Characteristics

Imports

kernel32

winspool.drv

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 120KB - Virtual size: 166KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 120KB - Virtual size: 166KB

.rsrc
Size: 16KB - Virtual size: 13KB