InitializePrintMonitorUI
Static task
static1
Behavioral task
behavioral1
Sample
16b422536f17d2cf68d9421cbf57c1e4b375a9845ca0912a34492beb78b1a850.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
16b422536f17d2cf68d9421cbf57c1e4b375a9845ca0912a34492beb78b1a850.dll
Resource
win10v2004-20230703-en
General
-
Target
16b422536f17d2cf68d9421cbf57c1e4b375a9845ca0912a34492beb78b1a850
-
Size
73KB
-
MD5
5a5fbc36e03b2f85ac10cb796dc7b354
-
SHA1
4c1f02663f49ae7d19b3420fca08b818827ab8ed
-
SHA256
16b422536f17d2cf68d9421cbf57c1e4b375a9845ca0912a34492beb78b1a850
-
SHA512
205a8bbd1c84f99988a08dbb173f1eb53e27b0f2f9daeccb0c51b686376bed15d2a689b4d86964f82b8fbb1fbb1bb8c7fa54dedcc37ec55b89379b181dbf7ad4
-
SSDEEP
1536:A/f2mvra7OSjRftvNhPwmCGJH0N3EvRN4ZmAqpW6sjKqrUyRSqBUByiqMS:vyra7OSjRftvNhPBCGJH0N3EvRN4ZmAl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16b422536f17d2cf68d9421cbf57c1e4b375a9845ca0912a34492beb78b1a850
Files
-
16b422536f17d2cf68d9421cbf57c1e4b375a9845ca0912a34492beb78b1a850.dll windows x86
b74baf08cf30da95d9ca8ec58b8317a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
vDbgPrintExWithPrefix
kernel32
CloseHandle
CommConfigDialogW
CreateFileW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrcatW
lstrcpyW
lstrlenW
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_vsnprintf
_wcsicmp
_wcsnicmp
abort
bsearch
calloc
free
fwrite
malloc
memcmp
memmove
sprintf
strchr
strcmp
strcpy
strcspn
strncmp
swprintf
vfprintf
wcsncmp
winspool.drv
ClosePrinter
OpenPrinterW
XcvDataW
user32
DialogBoxParamW
EndDialog
GetDlgItemInt
GetDlgItemTextW
GetWindowLongW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SetDlgItemInt
SetWindowLongW
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 26KB - Virtual size: 25KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ