288742fb957aac61795b5a67b26d3c042ac3447479059de2696a4fa854f5dfb6N

General

Target

288742fb957aac61795b5a67b26d3c042ac3447479059de2696a4fa854f5dfb6N
Size

212KB
MD5

17f077cb2915c5a8db6a234065c875c0
SHA1

51fc89546315da97d6deac9f144f714bf639e404
SHA256

288742fb957aac61795b5a67b26d3c042ac3447479059de2696a4fa854f5dfb6
SHA512

469b2e9a95bab6d5f9f9e012b4e9269d164b6bec582cb954582fe4842fa0c77b8a846e0c52955953d778ab8fc7dec59828b727464fe9ff1faca6ea5198f57792
SSDEEP

3072:gtNY8pH+aFGvpr7GlPoOidOqX1M6H5MT/RwdR//UI8VFKxUWA6XhHbwR3Z9ozv1L:QPpH+vvx8QTtXmRwdR3lSmO/M5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
288742fb957aac61795b5a67b26d3c042ac3447479059de2696a4fa854f5dfb6N

Files

288742fb957aac61795b5a67b26d3c042ac3447479059de2696a4fa854f5dfb6N
.exe windows:4 windows x86 arch:x86

5b7101b7b713b2583d9757e29d5ac6fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
OleUninitialize
OleInitialize

winspool.drv

AddPrintProvidorA
AddPrinterConnectionA
AddPrinterDriverExA
AddPrinterA
ClosePrinter
ConfigurePortA
DeleteFormA
DeleteMonitorA
DeletePortA
DeletePrinterDriverExA
EnumPrintProcessorDatatypesA
EnumPrinterDataA
EnumPrintersA
GetPrinterDataExA
WaitForPrinterChange

msvcp60

??0_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

_controlfp
??2@YAPAXI@Z
__CxxFrameHandler
malloc
time
strncmp
fclose
fwrite
fseek
fopen
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

kernel32

GetStartupInfoA
VirtualAlloc
VirtualFree
ResetEvent
DeleteFileA
CreateDirectoryA
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
SizeofResource
GetDateFormatA
GetVersionExA
OpenProcess
GetSystemTime
CreateFileA
QueryPerformanceCounter
GetWindowsDirectoryA
lstrcpyA
SetTapePosition

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 822KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b7101b7b713b2583d9757e29d5ac6fa

Headers

File Characteristics

Imports

ole32

winspool.drv

msvcp60

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 92KB - Virtual size: 822KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 92KB - Virtual size: 822KB

.rsrc
Size: 4KB - Virtual size: 2KB