586072031e12e8ab773a671bff0d9ab5418901069083a555465df74598e45e80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

586072031e12e8ab773a671bff0d9ab5418901069083a555465df74598e45e80
Size

297KB
MD5

0e7ca383af55f501074b420451c5af00
SHA1

5df8a39203273b30a9c85f56074cc856310d546a
SHA256

586072031e12e8ab773a671bff0d9ab5418901069083a555465df74598e45e80
SHA512

9949b9cc67de064566b3f46231be419e0112cbc557c1ee9020003ecd451507d6ae09e90cffda91e97473411cd48683797ef0d9d5fd3fae34951e1e96202fc4ca
SSDEEP

6144:5ZeYyyNGKmzUtp7qDsqVW3RXxv7wbkqH+CoPOg9R:5MnLzUtpO+XapH+C8Oa

Score

N/A

Malware Config

Signatures

Files

586072031e12e8ab773a671bff0d9ab5418901069083a555465df74598e45e80
.exe windows x86

e5cff24a312e90f75035696b2bebba17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetModuleFileNameA
EndUpdateResourceW
GetProcessHeap
GetStdHandle
lstrcmpiA
CreateNamedPipeA
IsValidCodePage
lstrcmpiA
lstrcmpiA
CreateWaitableTimerW
HeapCreate
lstrlenA
lstrcmpiA
Sleep
SetLastError
SuspendThread
GetModuleHandleA
WaitForSingleObject
GetDriveTypeW
GetBinaryTypeW
FileTimeToLocalFileTime
GetLogicalDriveStringsA

printui

PrinterPropPageProvider
PnPInterface
bPrinterSetup
bFolderRefresh

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrc
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ