4ff4b154123cf8cf7e5e720a74ef3bba5658bf66853bbfcc45eb29433a1fd978

Sharing

Copy URL Twitter E-mail

General

Target

4ff4b154123cf8cf7e5e720a74ef3bba5658bf66853bbfcc45eb29433a1fd978
Size

160KB
MD5

394961755e0f997bbfcb28ccc93aee23
SHA1

803813368c1340d10e5117168ded08f4b091a838
SHA256

4ff4b154123cf8cf7e5e720a74ef3bba5658bf66853bbfcc45eb29433a1fd978
SHA512

aec786cc0b2c8cf62c37dfd04b7b4e59c16a80e28ad0729c5a9958c7b100f2261f075d3c6b5303fc8ffb43c5027a6d81f2f5aa890998be37f73095b566bec404
SSDEEP

3072:c63mYMFCS9k6A4rvBjs0Lw4txNeDu9P29SsY1cG3mQXjf6neq8/Z:zECS9kdeBg4N9Jj1H3mof6t+Z

Score

N/A

Malware Config

Signatures

Files

4ff4b154123cf8cf7e5e720a74ef3bba5658bf66853bbfcc45eb29433a1fd978
.dll windows x86

c537b842ee7ec0eaf1e4e94d1c8ba953

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetPrivateProfileStringA
WinExec
GetTempPathA
GlobalDeleteAtom
GlobalAddAtomA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
GetCurrentProcessId
GlobalAlloc
GlobalFree
FreeLibrary
GetProfileStringA
LoadLibraryA
WriteProfileStringA
lstrlenA
GetProfileIntA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetProcessHeap
GetVersion
GetVersionExA
LocalFree
LoadLibraryExA
LocalAlloc
GetPrivateProfileIntA
DeleteCriticalSection
InitializeCriticalSection
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetSystemDirectoryA
GetLocaleInfoA
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
GetFileAttributesA
CreateDirectoryA
ReadFile
WriteFile
CloseHandle
CreateFileA
EnterCriticalSection
LeaveCriticalSection
Sleep
DisableThreadLibraryCalls
DeviceIoControl
GetModuleHandleA
GetProcAddress
SetLastError
GetLastError

user32

TranslateMessage
PeekMessageA
wsprintfA
LoadStringA
MessageBeep
FindWindowA
SendMessageA
PostMessageA
GetActiveWindow
DispatchMessageA

winspool.drv

OpenPrinterA
PrinterProperties
DocumentPropertiesA
GetPrinterDataW
GetPrinterDataA
SetPrinterDataW
DeletePrinterConnectionA
ConnectToPrinterDlg
AbortPrinter
GetPrinterA
ClosePrinter
ConfigurePortA
DeletePortA
EnumMonitorsA
DeleteMonitorA
AddMonitorA
AddPortA
EnumPortsA
AddPrinterA
SetJobA
GetJobA
AddJobA
ScheduleJob
FindClosePrinterChangeNotification
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumPrinterDriversA
GetPrinterDriverDirectoryA
DeletePrinterDriverA
GetPrinterDriverA
AddPrinterDriverA
ReadPrinter
WritePrinter
EndPagePrinter
StartPagePrinter
EndDocPrinter
StartDocPrinterA
SetPrinterA
EnumPrintersA
DeletePrinter
DeviceCapabilitiesA
AddPrintProcessorA
EnumPrintProcessorsA
EnumPrintProcessorDatatypesA
DeletePrintProcessorA
GetPrintProcessorDirectoryA
EnumJobsA
SetPrinterDataA

advapi32

RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyA
GetUserNameA
RegDeleteValueA

Exports

Exports

AbortPrinter
AddJobA
AddMonitorA
AddPortA
AddPrintProcessorA
AddPrinterA
AddPrinterDriverA
ClosePrinter
ConfigurePortA
ConnectToPrinterDlg
DeleteMonitorA
DeletePortA
DeletePrintProcessorA
DeletePrinter
DeletePrinterConnectionA
DeletePrinterDataExA
DeletePrinterDriverA
DeletePrinterKeyA
DeviceCapabilitiesA
DeviceIoControl
DocumentPropertiesA
EndDocPrinter
EndPagePrinter
EnumJobsA
EnumMonitorsA
EnumPortsA
EnumPrintProcessorDatatypesA
EnumPrintProcessorsA
EnumPrinterDataExA
EnumPrinterDriversA
EnumPrinterKeyA
EnumPrintersA
FindClosePrinterChangeNotification
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
GetJobA
GetPrintProcessorA
GetPrintProcessorDirectoryA
GetPrinterA
GetPrinterDataA
GetPrinterDataExA
GetPrinterDriverA
GetPrinterDriverDirectoryA
GetUserNameA
InitializeMonitorEx
IsProcessorFeaturePresent
OpenPrinterA
PrinterProperties
ReadPrinter
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
ScheduleJob
SetJobA
SetPrinterA
SetPrinterDataA
SetPrinterDataExA
StartDocPrinterA
StartPagePrinter
WritePrinter
ZSP_BrowseDialog
ZSP_ClosePrinter
ZSP_GetMonitor
ZSP_GetObjectType
ZSP_GetSharePath
ZSP_InitializeMonitor
ZSP_LoadDriverLibraryEx
ZSP_MakeSpoolFilePath
ZSP_OpenPrinterA
ZSP_ShareAsDialog
ZSP_StructCopy
s2ANSI
s2ByteLength
s2ClosePrinter
s2Disable
s2Enable
s2EnumLocalPrinterDrivers
s2EnumLocalPrinters
s2GetJob
s2GetModuleHandle
s2GetPrinter
s2GetPrinterData
s2GetPrinterDriver
s2IsJobCancelled
s2Native
s2OpenPrinter
s2Set
s2SetJob
s2SetPort
s2SetPrinterData
s2Something
s2StartDocPrinter
zlmGetControlInt
zlmGetControlString

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c537b842ee7ec0eaf1e4e94d1c8ba953

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

advapi32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 64KB - Virtual size: 63KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 64KB - Virtual size: 63KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB