LabelPrinterTool[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

LabelPrinterTool.exe
Size

2.2MB
MD5

27524604329d95ecd6c6773a3b6277de
SHA1

7519e330ecbbd669a3d93eb821383b8f8d181456
SHA256

6d646c1486f8e805b8e0f98d41ed3a210f4957574050e320d27bfa5a7cb52c18
SHA512

719530fa2df1f6918c5381a5c0a4a2d735be58d0e33935d2bb1bed9c72953fd3d6f54687fcc941a2c3b121497be6a2951adba2be3c9684ba9701346bf60b1fe4
SSDEEP

24576:OnyhciVnUYRUvpILTtwBtPT26+mDYpH2X:ssxVn9RUvGeTv+m8pHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LabelPrinterTool.exe

Files

LabelPrinterTool.exe
.exe windows:5 windows x86 arch:x86

56b6cdde3f3abcf2c142cf7063495749

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libintlp

libintl_gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_textdomain

toolusedll

enumPrinterPorts
enumLocalPrinters
getRongTaUSBPrinter
wchar2Ansi
isCOM
configLPT
configCOM
?destory@DeviceFactory@@SAXPAVDevice@@@Z
?create@DeviceFactory@@SAPAVDevice@@PAU_t_CONFIG_STATE@@@Z
ReleasePointer
EnumPortsWdm
strIsRealDigit
strIsDigit
unsignedChar2WCHAR_10
sendTcpData
getIP
GetLocalIp
sendUDPPacket
exchangeMAC
ReleasePrinterParamInfo
wchar2UnsigedChar
isPhysicalCOM
isLPT
ReleaseSSerInfo
UTF8_To_string
setRegStr
IsMacAddrAllZero
AllocSplStr

kernel32

GetStdHandle
WriteFile
HeapSize
HeapReAlloc
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
SetLastError
GetModuleFileNameA
GetCurrentThreadId
RaiseException
FlushInstructionCache
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetModuleFileNameW
lstrlenW
GetLastError
InitializeCriticalSection
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
Sleep
CloseHandle
GetVersionExW
WideCharToMultiByte
GetUserDefaultLCID
HeapCreate
GetOEMCP
GetACP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
CreateThread
ExitThread
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetModuleHandleA
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
CreateFileA
CreateFileW
SetEndOfFile
IsValidCodePage

user32

GetMessageW
TranslateMessage
DispatchMessageW
CreateDialogParamW
ShowWindow
MoveWindow
DialogBoxParamW
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
PeekMessageW
GetActiveWindow
LoadImageW
GetSystemMetrics
RegisterDeviceNotificationW
EnableWindow
GetWindowLongW
GetDlgItemInt
SetDlgItemInt
GetWindowTextW
MessageBoxW
EndDialog
SetWindowLongW
SetForegroundWindow
SendDlgItemMessageW
GetDlgItem
SendMessageW
wsprintfW
SetDlgItemTextW
SetWindowTextW
IsDialogMessageW
PostQuitMessage
DefWindowProcW
DestroyWindow
IsWindow
BeginPaint
EndPaint
UpdateWindow
InvalidateRect
SystemParametersInfoW
GetCapture
SetTimer
SetCapture
ReleaseCapture
GetDlgCtrlID
ClientToScreen
KillTimer
InflateRect
IsWindowEnabled
CallWindowProcW
CreateWindowExW
AdjustWindowRectEx
UnregisterClassA
DrawFocusRect
DrawEdge
CharNextW
GetDlgItemTextW
GetParent
PtInRect
GetMenu

gdi32

GetCurrentObject
SetTextColor
SetBkMode
DeleteDC
CreateSolidBrush
DeleteObject

winspool.drv

XcvDataW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize

oleaut32

VarUI4FromStr

shlwapi

PathFileExistsW

comctl32

ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Destroy
InitCommonControlsEx

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56b6cdde3f3abcf2c142cf7063495749

Headers

DLL Characteristics

File Characteristics

Imports

libintlp

toolusedll

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 226KB - Virtual size: 225KB

.rdata Size: 69KB - Virtual size: 68KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 226KB - Virtual size: 225KB

.rdata
Size: 69KB - Virtual size: 68KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 18KB - Virtual size: 18KB