ccd2f6cfd0c4b1f04c6ba779d82d9a6ce461a1b466575fdf493820768592f998

Sharing

Copy URL Twitter E-mail

General

Target

ccd2f6cfd0c4b1f04c6ba779d82d9a6ce461a1b466575fdf493820768592f998
Size

45KB
MD5

319d8f0069f3d8a31fd49200f29eab7f
SHA1

55d3c3e176bfe1b9c0cd38d5545a6222b47dd1a5
SHA256

ccd2f6cfd0c4b1f04c6ba779d82d9a6ce461a1b466575fdf493820768592f998
SHA512

8be4cf13213b095f36beee648aa2ebe582c5e19b1002cfd1d4229492eb16559becc479c555ca6def3ef69ff41b94b5de240005cf6f0749a8b63aecc540fb58ca
SSDEEP

768:DeoGGUpbDjmIdoBBir3vgKynbp5X5/aLSYpde:DSEOojwIfbpx2SYbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccd2f6cfd0c4b1f04c6ba779d82d9a6ce461a1b466575fdf493820768592f998

Files

ccd2f6cfd0c4b1f04c6ba779d82d9a6ce461a1b466575fdf493820768592f998
.dll windows:6 windows x64

3446e4dc91030389906e5144073b02b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegQueryValueExW

spoolss

ClosePrinter
EnumPortsW
PackStrings
DllFreeSplStr
AllocSplStr
DllAllocSplMem
RevertToPrinterSelf
ImpersonatePrinterClient
SetJobW
OpenPrinterW
DllFreeSplMem

user32

LoadStringW

msvcrt

sprintf
free
_amsg_exit
_initterm
bsearch
strcspn
strchr
memmove
strlen
strcpy
memcmp
memset
wcsncmp
wcstoul
_wcsnicmp
_wcsicmp
wcscpy
wcscmp
memcpy
wcslen
strcmp

kernel32

SetCommTimeouts
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalReAlloc
LocalFree
LocalAlloc
GetEnvironmentVariableA
SetDefaultCommConfigW
GetDefaultCommConfigW
ReadFile
QueryDosDeviceW
lstrcmpiW
LeaveCriticalSection
GetCommTimeouts
EnterCriticalSection
DeviceIoControl
DefineDosDeviceW
CreateFileW
CloseHandle
SetLastError
WriteFile
InitializeCriticalSection
GetLastError
DisableThreadLibraryCalls
DeleteCriticalSection
lstrcmpW

ntdll

vDbgPrintExWithPrefix

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3446e4dc91030389906e5144073b02b5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

spoolss

user32

msvcrt

kernel32

ntdll

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 4KB

.pdata Size: 1024B - Virtual size: 888B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 108B

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 4KB

.pdata
Size: 1024B - Virtual size: 888B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 108B