6abf526e3dacfcc625c576c942becc65858daeaf6def25b8d9a5e516904c5c46

Sharing

Copy URL Twitter E-mail

General

Target

6abf526e3dacfcc625c576c942becc65858daeaf6def25b8d9a5e516904c5c46
Size

2.3MB
MD5

913f6baff96aa3891c8d86210990e0a5
SHA1

74ef4b2cb3ec679dcfebb031d70f6dbcfa8ddd18
SHA256

6abf526e3dacfcc625c576c942becc65858daeaf6def25b8d9a5e516904c5c46
SHA512

e7ccb7adc76838da06ac8922c27c04ed5d9f9a299532435608a76d68ed604cf36a95cfe98797eb4c5f6af6378e6a65c729e44e3fdc9012908977ce360ef26ae7
SSDEEP

24576:knGF4D2xUulG3ZAleIibRZHeZIgOi4hIMSMRWXmznqVAtKTiK1m6O34KznlNKkCs:H4luWddgRX+FKTismLznlxCs

Score

N/A

Malware Config

Signatures

Files

6abf526e3dacfcc625c576c942becc65858daeaf6def25b8d9a5e516904c5c46
.dll windows x86

5cc2a7968ff4c5dd27be95b9965086b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hp1100gc

SetPrinterDataA
GetPrinterDriverA
RegOpenKeyExA
SDDMGetBinList
SDDMGetProfileIntArray
SDDMGetPaperList
SDDMGetName
SetBkColor
Polyline
CreateCompatibleDC
BitBlt
DeleteDC
Polygon
SetBkMode
SetTextAlign
SetTextColor
GetClipRgn
SelectClipRgn
GetStretchBltMode
SetStretchBltMode
ExtTextOutA
CreateRectRgn
CombineRgn
SDDMGetStdDefaults
SDDMWriteProfileStringW
SDDMEnumerateKeys
SDDMWriteProfileIntArray
SDDMGetPrinterKeyValue
RegCloseKey
SDDMGetProfile
ClosePrinter
FillRect
MoveToEx
LineTo
DeleteObject
GetPaperSize
SelectObject
SetJobA
GetPrinterA
GetJobA
OpenPrinterA
GetPrinterDataA
StartDocPrinterA
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
RegQueryValueExA

msimg32

AlphaBlend

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

HeapSize
IsDBCSLeadByteEx
GetFullPathNameW
GetFullPathNameA
InterlockedCompareExchange
GetLastError
GetTickCount
WideCharToMultiByte
GetVersionExA
lstrcmpA
lstrlenA
MulDiv
lstrcpynA
MultiByteToWideChar
GetProcAddress
FreeLibrary
OutputDebugStringA
LoadLibraryA
GetLocaleInfoW
ExpandEnvironmentStringsW
GlobalHandle
GlobalAlloc
GetLocalTime
WritePrivateProfileStringW
GetPrivateProfileStringW
FindResourceW
SizeofResource
LoadResource
LoadLibraryW
FreeResource
LockResource
GlobalLock
GlobalUnlock
GlobalFree
GetModuleFileNameW
CopyFileA
GetSystemDefaultLangID
LocalAlloc
LocalFree
SetLastError
LoadLibraryExA
GetModuleFileNameA
lstrcpyA
lstrcmpiA
GetUserDefaultLangID
HeapFree
HeapAlloc
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetFileAttributesA
HeapDestroy
SetEndOfFile
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
ReadFile
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetThreadLocale
CreateFileW

user32

GetDC
DrawTextW
InvalidateRect
GetSystemMetrics
ReleaseDC
GetDlgItem
GetClassNameA
PtInRect
EnableWindow
DrawTextA
OffsetRect
SetRect
GetClientRect
ScreenToClient
GetMessagePos
GetWindowDC
FrameRect
InflateRect
GetSysColor
LoadBitmapA
KillTimer
GetDlgCtrlID
SetWindowLongA
DialogBoxIndirectParamW
MessageBoxIndirectW
SetTimer
LoadImageA
SetCursor
PostMessageA
MoveWindow
SetClassLongA
GetClassLongA
SetFocus
MapDialogRect
ShowWindow
GetFocus
IsWindow
WinHelpA
GetDesktopWindow
GetWindowRect
SystemParametersInfoA
LoadImageW
GetSysColorBrush
GetWindowLongA
GetParent
SendMessageA
SendMessageW
wsprintfW
wsprintfA
LoadStringA
MessageBoxA
EndDialog
SetDlgItemTextA
GetDlgItemTextA
SetWindowTextA
DrawFocusRect

gdi32

RestoreDC
SaveDC
GetObjectA
CreateCompatibleBitmap
IntersectClipRect
Rectangle
GetBkColor
GetPixel
CreateFontIndirectA
GetTextExtentPoint32W
FrameRgn
FillRgn
OffsetRgn
CreateRoundRectRgn
Arc
SetColorAdjustment
SetBrushOrgEx
GetColorAdjustment
GetTextExtentPoint32A
GetTextAlign
GetTextColor
ExtTextOutW
CreateSolidBrush
CreatePen
GetStockObject
StretchBlt
EnumFontFamiliesA

winspool.drv

StartDocPrinterW
GetPrinterDataW
SetPrinterDataW
GetPrinterDriverW
GetPrinterW
OpenPrinterW

shell32

ShellExecuteW
SHGetFolderPathA
ShellExecuteExA

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExA

comctl32

CreatePropertySheetPageW
PropertySheetW

Exports

Exports

AFCheckCleaningJob
AFCheckTraySelection
AFHitTestPreview
AFPaperEditE2E
AFPaperEditE2M
AFPaperEditM2E
AFPaperEditM2M
AFPaperUpDnE2E
AFPaperUpDnE2M
AFPaperUpDnM2E
AFPaperUpDnM2M
APCalculateChecksum
APChangeRegion
APCicadaServiceRequest
APCicadaShopForSupplies
APCicadaShortMedia
APCustomizeFont
APDiffPaperDrawItem
APDisplayPreview
APGetRegionInfo
APSubmitCleaningJob
APSubmitPJLJob
DestroyPropSheetPages
DevQueryPrintEx
DllCanUnloadNow
DllGetClassObject
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
EPAddTrayPapers
EPConfigPageCountInit
EPConfigServiceIDInit
EPConfigTabstopInit
EPConfigVersionListInit
EPDiffPaperInit
EPPaperUpDn
EPRedrawListItem
EPfillbinsubset
EPlistWMszName
EventSUPropSheet
GetPropSheetPages
MxdcGetPDEVAdjustment
PrinterProperties

Sections

.text
Size: 852KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cc2a7968ff4c5dd27be95b9965086b6

Headers

File Characteristics

Imports

hp1100gc

msimg32

version

kernel32

user32

gdi32

winspool.drv

shell32

ole32

oleaut32

advapi32

comctl32

Exports

Exports

Sections

.text Size: 852KB - Virtual size: 848KB

.rdata Size: 448KB - Virtual size: 447KB

.data Size: 152KB - Virtual size: 159KB

.rsrc Size: 800KB - Virtual size: 799KB

.reloc Size: 64KB - Virtual size: 63KB

.text
Size: 852KB - Virtual size: 848KB

.rdata
Size: 448KB - Virtual size: 447KB

.data
Size: 152KB - Virtual size: 159KB

.rsrc
Size: 800KB - Virtual size: 799KB

.reloc
Size: 64KB - Virtual size: 63KB