2367aee97f5c6a4dad9db3648acc848fe8cc2eb369343f7c80ab82da47a1a3f5

Sharing

Copy URL Twitter E-mail

General

Target

2367aee97f5c6a4dad9db3648acc848fe8cc2eb369343f7c80ab82da47a1a3f5
Size

273KB
MD5

0dcc44243bef24e938f26e21dcce7174
SHA1

b933e9a57b2b21feba0c7fea03841805e52b5b30
SHA256

2367aee97f5c6a4dad9db3648acc848fe8cc2eb369343f7c80ab82da47a1a3f5
SHA512

f44a9f91612d1c68bda1c8fbe3ef119da11ff9c34d99b54945f33d733578e7a3e5b1d4760180c694537caf5ab319a32ea3bc1f5a378c9b27e370ed9ab9cde486
SSDEEP

3072:vNPJiaqxh8gz5wxatqxI02TEK/BPaAg/7Eajtd0G6LvOVT1JV6ewZPSWpsQ2CF6d:vCugjttPRaDY2tLPVT1T6rSW6u6Wi

Score

N/A

Malware Config

Signatures

Files

2367aee97f5c6a4dad9db3648acc848fe8cc2eb369343f7c80ab82da47a1a3f5
.exe windows x86

1fc3bdd5ede0a64d563c6b8cda3a7199

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SystemTimeToTzSpecificLocalTime
HeapSize
lstrcmpiW
IsDebuggerPresent
HeapFree
SizeofResource
FindClose
OutputDebugStringW
LocalFree
EnumResourceNamesW
CreateFileW
FreeLibrary
GetProcessHeap
LeaveCriticalSection
FindResourceExW
GetFileSize
LocalAlloc
GetSystemTimeAsFileTime
LoadResource
UnhandledExceptionFilter
ProcessIdToSessionId
FormatMessageW
lstrlenW
SystemTimeToFileTime
LoadLibraryExW
HeapAlloc
GetCurrentThreadId
GetTimeZoneInformation
LockResource
FindResourceW
HeapDestroy
GetSystemTime
DeleteCriticalSection
CloseHandle
SetUnhandledExceptionFilter
RaiseException
GetModuleHandleW
HeapReAlloc
EnterCriticalSection
FindFirstFileW
GetCurrentProcess
VirtualAllocEx

gdi32

DeleteDC
CreateCompatibleBitmap
PatBlt
CreateCompatibleDC
SelectObject
CreateDCW
CreateSolidBrush
DeleteObject
GetObjectW

oleaut32

VarUI4FromStr

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoCreateGuid

user32

LoadImageW
DestroyIcon
DrawIconEx
GetForegroundWindow
CharNextW
GetActiveWindow
AllowSetForegroundWindow
GetSystemMetrics
GetDesktopWindow

winspool.drv

DocumentEvent
EnumPrinterKeyA
PrinterProperties
DeletePrinterConnectionW
EnumPrinterDataW
GetPrintProcessorDirectoryA
AddPrinterDriverA
PrinterMessageBoxW
WaitForPrinterChange
SpoolerPrinterEvent
DevQueryPrint
GetPrinterA
EnumPrintProcessorDatatypesW
ExtDeviceMode

msrle32

DriverProc

Sections

.MgTKJ
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ

.gIabXEW
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_MEM_READ

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rMTvTr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JNknyQV
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CxDqC
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IkzRZl
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QFlMI
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lqItB
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iMaG
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QHuRWLj
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hZvUl
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1fc3bdd5ede0a64d563c6b8cda3a7199

Headers

File Characteristics

Imports

kernel32

gdi32

oleaut32

ole32

user32

winspool.drv

msrle32

Sections

.MgTKJ Size: 2KB - Virtual size: 22KB

.gIabXEW Size: 2KB - Virtual size: 14KB

.text Size: 16KB - Virtual size: 16KB

.rMTvTr Size: 2KB - Virtual size: 1KB

.JNknyQV Size: 2KB - Virtual size: 2KB

.CxDqC Size: 2KB - Virtual size: 1KB

.IkzRZl Size: 1024B - Virtual size: 804B

.data Size: 6KB - Virtual size: 132KB

.rdata Size: 208KB - Virtual size: 207KB

.QFlMI Size: 3KB - Virtual size: 2KB

.lqItB Size: 2KB - Virtual size: 2KB

.rsrc Size: 17KB - Virtual size: 17KB

.iMaG Size: 1KB - Virtual size: 1KB

.QHuRWLj Size: 2KB - Virtual size: 1KB

.hZvUl Size: 3KB - Virtual size: 2KB

.MgTKJ
Size: 2KB - Virtual size: 22KB

.gIabXEW
Size: 2KB - Virtual size: 14KB

.text
Size: 16KB - Virtual size: 16KB

.rMTvTr
Size: 2KB - Virtual size: 1KB

.JNknyQV
Size: 2KB - Virtual size: 2KB

.CxDqC
Size: 2KB - Virtual size: 1KB

.IkzRZl
Size: 1024B - Virtual size: 804B

.data
Size: 6KB - Virtual size: 132KB

.rdata
Size: 208KB - Virtual size: 207KB

.QFlMI
Size: 3KB - Virtual size: 2KB

.lqItB
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 17KB - Virtual size: 17KB

.iMaG
Size: 1KB - Virtual size: 1KB

.QHuRWLj
Size: 2KB - Virtual size: 1KB

.hZvUl
Size: 3KB - Virtual size: 2KB