___CPPdebugHook
Overview
overview
8Static
static
8Printfil/Manual.htm
windows7-x64
1Printfil/Manual.htm
windows10-2004-x64
1Printfil/Prev32.dll
windows7-x64
3Printfil/Prev32.dll
windows10-2004-x64
3Printfil/Printfil.exe
windows7-x64
8Printfil/Printfil.exe
windows10-2004-x64
8Printfil/license.rtf
windows7-x64
4Printfil/license.rtf
windows10-2004-x64
1Printfil/m...c1.htm
windows7-x64
1Printfil/m...c1.htm
windows10-2004-x64
1Printfil/m...10.htm
windows7-x64
1Printfil/m...10.htm
windows10-2004-x64
1Printfil/m...11.htm
windows7-x64
1Printfil/m...11.htm
windows10-2004-x64
1Printfil/m...12.htm
windows7-x64
1Printfil/m...12.htm
windows10-2004-x64
1Printfil/m...13.htm
windows7-x64
1Printfil/m...13.htm
windows10-2004-x64
1Printfil/m...14.htm
windows7-x64
1Printfil/m...14.htm
windows10-2004-x64
1Printfil/m...15.htm
windows7-x64
1Printfil/m...15.htm
windows10-2004-x64
1Printfil/m...16.htm
windows7-x64
1Printfil/m...16.htm
windows10-2004-x64
1Printfil/m...17.htm
windows7-x64
1Printfil/m...17.htm
windows10-2004-x64
1Printfil/m...c2.htm
windows7-x64
1Printfil/m...c2.htm
windows10-2004-x64
1Printfil/m...c3.htm
windows7-x64
1Printfil/m...c3.htm
windows10-2004-x64
1Printfil/m...c4.htm
windows7-x64
1Printfil/m...c4.htm
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Printfil/Manual.htm
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Printfil/Manual.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Printfil/Prev32.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Printfil/Prev32.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Printfil/Printfil.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Printfil/Printfil.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Printfil/license.rtf
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Printfil/license.rtf
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
Printfil/manual/c1.htm
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Printfil/manual/c1.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
Printfil/manual/c10.htm
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
Printfil/manual/c10.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Printfil/manual/c11.htm
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
Printfil/manual/c11.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
Printfil/manual/c12.htm
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
Printfil/manual/c12.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
Printfil/manual/c13.htm
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Printfil/manual/c13.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Printfil/manual/c14.htm
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
Printfil/manual/c14.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
Printfil/manual/c15.htm
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
Printfil/manual/c15.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
Printfil/manual/c16.htm
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
Printfil/manual/c16.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
Printfil/manual/c17.htm
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Printfil/manual/c17.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
Printfil/manual/c2.htm
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
Printfil/manual/c2.htm
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
Printfil/manual/c3.htm
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
Printfil/manual/c3.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
Printfil/manual/c4.htm
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
Printfil/manual/c4.htm
Resource
win10v2004-20220812-en
General
-
Target
ab9887acb555e0078cae8a4d2f9dc45c8b2a0e8e8929b404d8010058f1f2bfb0
-
Size
1.2MB
-
MD5
9376c543358082ecd439d1296fa8abfc
-
SHA1
c58fd5801b727478f8610f2e6ba1a64aab9490bf
-
SHA256
ab9887acb555e0078cae8a4d2f9dc45c8b2a0e8e8929b404d8010058f1f2bfb0
-
SHA512
399959eed65227f84033f36ff40facc6816982ca22bcdaede13f1595ebeb246f6f13b3a50e05548bfdc6c6a349a69d856284dffebcfefc12031b64ab198f096b
-
SSDEEP
24576:Rr1NQoWjiSwwR9RLOMV5jngw+/SJNDDtGZ0F4tg+rpXLT94C93gTIrr3rg7IKs:pkoWjRHKMVlgwTPDStxBahI/bg7Ls
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Printfil/Printfil.exe upx
Files
-
ab9887acb555e0078cae8a4d2f9dc45c8b2a0e8e8929b404d8010058f1f2bfb0.zip
-
Printfil/Backgr.bmp
-
Printfil/Manual.htm.html
-
Printfil/Prev32.dll.dll windows x86
a760606a533af4814ef9283c1ca3b322
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
user32
EnumThreadWindows
MessageBoxA
wsprintfA
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Printfil/Printfil.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 710KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Printfil/arabic.msg
-
Printfil/brazilian.msg
-
Printfil/catalan.msg
-
Printfil/czech.msg
-
Printfil/danish.msg
-
Printfil/dutch.msg
-
Printfil/english.msg
-
Printfil/epson.seq
-
Printfil/finnish.msg
-
Printfil/french.msg
-
Printfil/german.msg
-
Printfil/greek.msg
-
Printfil/hebrew.msg
-
Printfil/hp.seq
-
Printfil/hungarian.msg
-
Printfil/ibm.seq
-
Printfil/icelandic.msg
-
Printfil/italian.msg
-
Printfil/license.rtf.rtf
-
Printfil/macedonian.msg
-
Printfil/manual/c1.htm.html
-
Printfil/manual/c10.htm.html
-
Printfil/manual/c11.htm.html
-
Printfil/manual/c12.htm.html
-
Printfil/manual/c13.htm.html
-
Printfil/manual/c14.htm.html
-
Printfil/manual/c15.htm.html
-
Printfil/manual/c16.htm.html
-
Printfil/manual/c17.htm.html
-
Printfil/manual/c2.htm.html
-
Printfil/manual/c3.htm.html
-
Printfil/manual/c4.htm.html
-
Printfil/manual/c5.htm.html
-
Printfil/manual/c6.htm.html
-
Printfil/manual/c7.htm.html
-
Printfil/manual/c8.htm.html
-
Printfil/manual/c9.htm.html
-
Printfil/manual/index.htm.html
-
Printfil/manual/top.htm.html
-
Printfil/messages.dat
-
Printfil/norwegian.msg
-
Printfil/polish.msg
-
Printfil/portuguese.msg
-
Printfil/printfil.dat
-
Printfil/romanian.msg
-
Printfil/russian.msg
-
Printfil/serbian.msg
-
Printfil/slovenian.msg
-
Printfil/spanish.msg
-
Printfil/swedish.msg
-
Printfil/turkish.msg
-
Printfil/unins000.dat
-
Printfil/unins000.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 565KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Printfil/urdu.msg