8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491

Sharing

Copy URL

Twitter E-mail

General

Target

8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491
Size

353KB
MD5

b07e86e44f62150bf8295fa7282f25a4
SHA1

b7b35bceb0d2b68b87b7782769076bbaf6143324
SHA256

8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491
SHA512

cb822b6a086a8c1153fe569f2228d79bab66b01b52b7effecf188aee597b9a3b05c331843ef89bbbe273851f0db70e9818da6c231634ab039aea684460500243
SSDEEP

6144:ypiV83PO2XiHZ/ZYtlx6dPVJUoqBfHv/O/lviDjyGg1/4hYi:ysV8G2XsYlx6Sog/vmtviXyGg1/Mj

Score

N/A

Malware Config

Signatures

Files

8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491
.exe windows x86

586ed09a6cec7d82138b85f063fa925f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
FindTextW
PrintDlgExW
ChooseFontW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
CommDlgExtendedError
GetSaveFileNameW

winspool.drv

GetPrinterDriverW
ClosePrinter
OpenPrinterW

msvcrt

_XcptFilter
_exit
_c_exit
time
localtime
_cexit
iswctype
_except_handler3
_wtol
wcsncmp
_snwprintf
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcsncpy

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocalTime
GetUserDefaultLCID
GetDateFormatW

gdi32

EndPage
AbortDoc
EndDoc
DeleteDC
StartPage
GetTextExtentPoint32W
CreateDCW
SetAbortProc
GetTextFaceW
TextOutW
StartDocW
EnumFontsW
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
DeleteObject

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.deah
Size: 322KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oaeh
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.daub
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.maub
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.maug
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mauh
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mauH
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

586ed09a6cec7d82138b85f063fa925f

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

winspool.drv

msvcrt

kernel32

gdi32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.deah Size: 322KB - Virtual size: 324KB

.oaeh Size: 1024B - Virtual size: 4KB

.daub Size: 1024B - Virtual size: 4KB

.maub Size: 1024B - Virtual size: 4KB

.maug Size: 1024B - Virtual size: 4KB

.mauh Size: 1024B - Virtual size: 4KB

.mauH Size: 1024B - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 436KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.deah
Size: 322KB - Virtual size: 324KB

.oaeh
Size: 1024B - Virtual size: 4KB

.daub
Size: 1024B - Virtual size: 4KB

.maub
Size: 1024B - Virtual size: 4KB

.maug
Size: 1024B - Virtual size: 4KB

.mauh
Size: 1024B - Virtual size: 4KB

.mauH
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 436KB