c10d8d66ad1e419c42c000698da05c06d127b8d4a704ccececd38a8d3bef3a32

Sharing

Copy URL Twitter E-mail

General

Target

c10d8d66ad1e419c42c000698da05c06d127b8d4a704ccececd38a8d3bef3a32
Size

152KB
MD5

93f9b3537df12f583b9d5a8638789107
SHA1

c1f06d5bbd5311437745fa2ca8230db662ecb033
SHA256

c10d8d66ad1e419c42c000698da05c06d127b8d4a704ccececd38a8d3bef3a32
SHA512

87f488f8d4955a66491b546b08d81b509674db5089d9a4c39d141557a512dd231da83c83ec1227a650830fc71a0c124a67984e62920fcb0b4f37636f5a20071b
SSDEEP

3072:SpOTBfHGJhOSlB1xW/uE5T/7iBVT74TpKxsuyhTIqF2hF68C:SpOBHGPxWbiBV4TUcf2q

Score

N/A

Malware Config

Signatures

Files

c10d8d66ad1e419c42c000698da05c06d127b8d4a704ccececd38a8d3bef3a32
.dll windows x86

b59ddf95a8001ff46d0790d2ffe90109

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

spoolss

EnumJobsA
EnumPrintersA
SetPrinterA
SetJobA
OpenPrinterA
GetJobA
GetPrinterA
ClosePrinter

ws2_32

ntohs
ioctlsocket
inet_ntoa
recvfrom
WSAGetLastError
sendto
inet_addr
gethostbyname
gethostname
htons
send
connect
shutdown
select
__WSAFDIsSet
recv
htonl
bind
closesocket
socket
WSAStartup
WSASocketA
WSACleanup
setsockopt
WSASetLastError

hpzjsn01

??0OctetStr@@QAE@PBD@Z
??YOctetStr@@QAEAAV0@PBD@Z
??0SnmpInt32@@QAE@XZ
?get_printable@OctetStr@@UAEPADXZ
?get_printable@SnmpInt32@@UAEPADXZ
??0OctetStr@@QAE@XZ
?len@OctetStr@@QBEKXZ
??AOctetStr@@QAEAAEH@Z
??1OctetStr@@UAE@XZ
??1SnmpInt32@@UAE@XZ
??0IpAddress@@QAE@PBD@Z
??0CTarget@@QAE@ABVAddress@@@Z
??1IpAddress@@UAE@XZ
??0Oid@@QAE@PBD@Z
??1SnmpUInt32@@UAE@XZ
?valid@Address@@UBEHXZ
??1Address@@UAE@XZ
??1SnmpTarget@@UAE@XZ
?get_notify_filter@Snmp@@UAEHAAV?$SnmpCollection@VOid@@@@AAV?$SnmpCollection@VCTarget@@@@@Z
?notify_unregister@Snmp@@UAEHXZ
?notify_register@Snmp@@UAEHABV?$SnmpCollection@VOid@@@@ABV?$SnmpCollection@VCTarget@@@@Q6AXHPAV1@AAVPdu@@AAVSnmpTarget@@PAX@ZPBX@Z
?notify_register@Snmp@@UAEHABV?$SnmpCollection@VOid@@@@ABV?$SnmpCollection@VCTarget@@@@ABV?$SnmpCollection@VGenAddress@@@@Q6AXHPAV1@AAVPdu@@AAVSnmpTarget@@PAX@ZPBX@Z
?inform@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?inform@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?trap@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?get_bulk@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@HH@Z
?get_bulk@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@HHQ6AXHPAV1@01PAX@ZPBX@Z
?set@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?set@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?get_next@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?get_next@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?get@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?get@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?cancel@Snmp@@UAEHK@Z
initSNMP
uninitSNMP
?get_value@Vb@@QAEHAAVSnmpSyntax@@@Z
?get_error_status@Pdu@@QAEHXZ
?get_vb@Pdu@@QBEHAAVVb@@H@Z
??YPdu@@QAEAAV0@AAVVb@@@Z
??1CTarget@@UAE@XZ
??1Vb@@QAE@XZ
??1Pdu@@QAE@XZ
??1Snmp@@QAE@XZ
??0Snmp@@QAE@AAHG@Z
??0Pdu@@QAE@XZ
??1Oid@@UAE@XZ
??0Vb@@QAE@ABVOid@@@Z

hptcpmui

_DisplayVPNPrintWindow@0
_GetVPNString@8

hpzjfw01

DeletePortMapping
AddPortMapping
NeedToChangeFirewall
AnyFirewalledConnection
COMFirewallOpen
CallMicrosoftFailingAPI
COMFirewallClose

kernel32

CreateThread
DisableThreadLibraryCalls
GetSystemTime
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
ReleaseSemaphore
CreateSemaphoreA
DeleteFileA
SetFilePointer
ReadFile
GetTempFileNameA
GetComputerNameA
SetLastError
WriteFile
CreateMutexA
ReleaseMutex
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
LocalFree
CreateEventA
GetTickCount
GetCurrentProcessId
HeapFree
HeapAlloc
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
GetLastError
CreateFileA
CloseHandle
WaitForSingleObject
LocalAlloc
SetEvent
SetThreadPriority

user32

LoadCursorA
SetCursor
LoadStringA

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource
RegCreateKeyExA
RegisterEventSourceA
ReportEventA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcr71

free
_iob
printf
_purecall
??_V@YAXPAX@Z
strncpy
time
??_U@YAPAXI@Z
sprintf
__dllonexit
_except_handler3
?terminate@@YAXXZ
_ismbcdigit
_mbsstr
_mbsnbcat
isxdigit
_mbsicmp
srand
rand
_snprintf
_stricmp
malloc
strncat
fprintf
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter

Exports

Exports

??0Address@@QAE@ABV0@@Z
??0Address@@QAE@XZ
??0CPortABC@@QAE@ABV0@@Z
??0CPortABC@@QAE@XZ
??0CTcpMibABC@@QAE@ABV0@@Z
??0CTcpMibABC@@QAE@XZ
??0Snmp@@QAE@ABV0@@Z
??0SnmpSyntax@@QAE@ABV0@@Z
??0SnmpSyntax@@QAE@XZ
??0SnmpTarget@@QAE@ABV0@@Z
??0SnmpTarget@@QAE@XZ
??1CPortABC@@UAE@XZ
??1CTcpMibABC@@UAE@XZ
??1Counter32@@UAE@XZ
??1SnmpSyntax@@UAE@XZ
??4Address@@QAEAAV0@AAV0@@Z
??4CPortABC@@QAEAAV0@ABV0@@Z
??4CTcpMibABC@@QAEAAV0@ABV0@@Z
??4Snmp@@QAEAAV0@ABV0@@Z
??4SnmpSyntax@@UAEAAV0@AAV0@@Z
??4SnmpTarget@@QAEAAV0@ABV0@@Z
??_7Address@@6B@
??_7CPortABC@@6B@
??_7CTcpMibABC@@6B@
??_7Snmp@@6B@
??_7SnmpSyntax@@6B@
??_7SnmpTarget@@6B@
?Read@CPortABC@@UAEKQAXPAEKPAK@Z
?hashFunction@Address@@UBEIXZ
AddPortUIEx
ClosePort
ConfigPortUIEx
EndDocPort
InitializeMonitor
InitializeMonitorEx
InitializePrintMonitor
InitializePrintMonitor2
OpenPort
ReadPort
StartDocPort
WritePort
XcvClosePort
XcvOpenPort

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b59ddf95a8001ff46d0790d2ffe90109

Headers

File Characteristics

Imports

spoolss

ws2_32

hpzjsn01

hptcpmui

hpzjfw01

kernel32

user32

advapi32

msvcr71

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 56KB - Virtual size: 52KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 56KB - Virtual size: 52KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB