ede692a0bde56ff9611fa4c262c3cefef7ce5f2d2ad8459cf29478f7848b207a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ede692a0bde56ff9611fa4c262c3cefef7ce5f2d2ad8459cf29478f7848b207a
Size

58KB
MD5

c027371f85d72f9ec818321de9a7db6b
SHA1

1ec334eb59fcb6ae2d2156d2f3983e07684d99e0
SHA256

ede692a0bde56ff9611fa4c262c3cefef7ce5f2d2ad8459cf29478f7848b207a
SHA512

07d191a381645a2f93fb622db07bee9e40cd2f68510318e5accdedb65f4fcbcec68c109a84b66bd6e0a24d51c87acfaa429a04d59f4735e6bf989a564ba946bb
SSDEEP

1536:h+cnvz6W+NMLE7/6RE4bax6FePCato82rgMfzB0w2:h+Svz64m6kK9go0w

Score

N/A

Malware Config

Signatures

Files

ede692a0bde56ff9611fa4c262c3cefef7ce5f2d2ad8459cf29478f7848b207a
.exe windows x86

8c99d4120ab7bd52fd1c11280825fc0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
IsValidCodePage
lstrcmpiA
lstrcmpiA
FileTimeToLocalFileTime
lstrlenA
SuspendThread
GetModuleFileNameA
GetBinaryTypeW
GetDriveTypeW
WaitForSingleObject
GetStdHandle
HeapCreate
GetProcessHeap
CreateWaitableTimerW
Sleep
lstrcmpiA
EndUpdateResourceW
GetModuleHandleA
lstrcmpiA
SetLastError
CreateNamedPipeA
GetLogicalDriveStringsA

printui

bPrinterSetup
PnPInterface
bFolderRefresh
PrinterPropPageProvider

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ