96bb5690969a28f22af69085fb265872bbb2e7e95ae0cedf3037558ca412f040

Sharing

Copy URL Twitter E-mail

General

Target

96bb5690969a28f22af69085fb265872bbb2e7e95ae0cedf3037558ca412f040
Size

20KB
MD5

507214c3a3e52a13101899e4e9df3bfc
SHA1

6dd550db4859d98bb05acf82df736cbb902af183
SHA256

96bb5690969a28f22af69085fb265872bbb2e7e95ae0cedf3037558ca412f040
SHA512

22831bb6f567f8bb11467435a1634cd3ed1a98e636f14a9d215d3f0bf52c5899ce9bb776ae10dd64a73d8d9bf8bce51301e5a04c363cbee3d13503523c5d375a
SSDEEP

384:C4xFO8+iaiP4qVfYAkLoK8JoP2AWWkQVOnXNh/bqxlMLhR:zoXiwST2+5nbqolR

Score

1^/10

Malware Config

Signatures

Files

96bb5690969a28f22af69085fb265872bbb2e7e95ae0cedf3037558ca412f040
.dll windows:6 windows x86 arch:x86

877a21514ff98606761c98183bb0204d

Code Sign

fc:a4:04:83:b4:07:ef:f1:44:c5:3b:46:46:2d:ca:fd:e0:f0:bc:7f
Signer

Actual PE Digest

fc:a4:04:83:b4:07:ef:f1:44:c5:3b:46:46:2d:ca:fd:e0:f0:bc:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\driver-trunk-stable-unicode-tw\tty\render\objfre_win7_x86\i386\TTY.pdb

Imports

msvcrt

_amsg_exit
_initterm
free
malloc
_XcptFilter
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetLastError
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
LocalFree
LocalAlloc

winspool.drv

GetPrinterDataA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

877a21514ff98606761c98183bb0204d

Code Sign

fc:a4:04:83:b4:07:ef:f1:44:c5:3b:46:46:2d:ca:fd:e0:f0:bc:7fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

winspool.drv

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 1KB - Virtual size: 1KB

fc:a4:04:83:b4:07:ef:f1:44:c5:3b:46:46:2d:ca:fd:e0:f0:bc:7f
Signer

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 1KB - Virtual size: 1KB