69bf3227ba63c1c0885b5c6e90edfec8

Sharing

Copy URL Twitter E-mail

General

Target

69bf3227ba63c1c0885b5c6e90edfec8
Size

228KB
MD5

69bf3227ba63c1c0885b5c6e90edfec8
SHA1

884073e6d5c8fbf810a72fde9f1cf6197d759ae4
SHA256

47ed5e6c8e05cfb146fa4908a922a252cc9169a7673eb3406382df3243534125
SHA512

a9dcf7b79c8f9298f7539698026fb5ebbe3e06d5b66869ab6729bd74dd28bfda9ef2a2de38da11429ca2885b53e19222e82f7805c077c2280fef6b272cfba44c
SSDEEP

6144:cxynylmBiDyFufTPG1MqEptuI5WyrE0ZXoQq:cxynylmUyFufiaqguSJVXoQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69bf3227ba63c1c0885b5c6e90edfec8

Files

69bf3227ba63c1c0885b5c6e90edfec8
.dll windows:4 windows x86 arch:x86

71e878b46228b9c2a1c83021416e2ff2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

zspool

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
GetPrinterDataA
EnumPrinterDriversA
EnumPrintersA
OpenPrinterA
GetPrinterDriverA
ClosePrinter
AddPrinterDriverA
RegSetValueExA
AddPrintProcessorA
GetPrinterA
SetPrinterA
EnumPrintProcessorsA
GetPrinterDriverDirectoryA
SetPrinterDataA

zsr

SrMemoryCheck

zsddm

SDDMLoadString
SDDMEnumerateKeys
SDDMGetMediaList
SDDMSizeofDEVMODE
SDDMLoadThresholds
SDDMFreeThresholds
SDDMGetModuleVersions
SDDMGetBinList
SDDMGetPaperNames
SDDMReadProfile
SDDMLoadDriver
SDDMGetResolutionList
SDDMGetMinMaxExtents
SDDMGetPaperList
GetPaperSize
SDDMGetName
SDDMWriteProfileString
SDDMWriteProfileIntArray
SDDMGetPrinterKeyValue
SDDMGetDDMInfo
SDDMGetProfile
SDDMGetStdDefaults

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

PropertySheetA

kernel32

MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
GetStdHandle
WriteFile
ExitProcess
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
GetStringTypeA
GetLastError
LocalFree
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
lstrcatA
lstrcpyA
SizeofResource
LockResource
LoadResource
GetStringTypeW
GetUserDefaultLangID
FreeLibrary
FindResourceA
LoadLibraryA
GetProcAddress
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
MulDiv
lstrcmpiA
GetFileAttributesA
lstrlenA
GetPrivateProfileStringA
FindClose
CreateDirectoryA
FindFirstFileA
HeapFree
HeapAlloc
GetProcessHeap
CopyFileA
CloseHandle
GetSystemDirectoryA
CreateFileA
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
TlsFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetCurrentThreadId
SetLastError
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
HeapSize
FindResourceExA

user32

EnumChildWindows
GetWindowContextHelpId
IsWindowEnabled
SetDlgItemInt
SetWindowPos
LoadBitmapA
LoadStringA
DestroyIcon
LoadIconA
ReleaseDC
GetDC
UpdateWindow
SetRect
GetSysColor
DefWindowProcA
SetCapture
ReleaseCapture
GetCapture
SetCursor
LoadCursorA
EndPaint
BeginPaint
GetUpdateRect
SetRectEmpty
RegisterClassA
UnregisterClassA
CheckDlgButton
SetTimer
KillTimer
CreateWindowExA
GetClassNameA
SetWindowContextHelpId
ScreenToClient
PtInRect
IsWindowVisible
WinHelpA
DialogBoxParamA
GetDlgItemTextA
SetFocus
MessageBoxA
SendDlgItemMessageA
GetWindowRect
OffsetRect
MoveWindow
GetSystemMetrics
GetParent
GetWindowTextA
SetWindowTextA
MessageBeep
RegisterWindowMessageA
SetWindowLongA
SendMessageA
ShowWindow
EnableWindow
GetWindowLongA
CheckRadioButton
GetClientRect
GetDlgCtrlID
IsDlgButtonChecked
GetNextDlgGroupItem
GetDlgItemInt
GetDlgItem
InvalidateRect
SetDlgItemTextA
wsprintfA
EndDialog
FillRect

gdi32

DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
StretchDIBits
SelectClipRgn
CreateSolidBrush
Rectangle
LineTo
MoveToEx
SetROP2
CreatePen
Polygon
DeleteObject
CreateRectRgnIndirect
GetStockObject

comdlg32

ChooseColorA

Exports

Exports

DDMAbout
DDMColor
DDMConfig
DDMConfigSave
DDMCustomPapers
DDMDevMode
DDMDuplex
DDMHalftoning
DDMNewOptions
DDMPrinterProp
DDMSuperRIP
DDMTricks
GetSDDMUIInfo
NewColorHook
PageSizeControlProc
SDDMAdvancedSetupDialog
SDDMContextHelp
SDDMCrackInfo
SDDMCreatePropertySheet
SDDMDestroyPropertySheet
SDDMDevInstall
SDDMDevUninstall
SDDMDeviceCapabilities
SDDMDialog
SDDMDialogAlloc
SDDMDialogParam
SDDMEndDialog
SDDMExtDeviceMode
SDDMExtPropertySheet
SDDMGetGDIInfo
SDDMGetMode
SDDMHelp
SDDMSuperHelp
SpinControlProc

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71e878b46228b9c2a1c83021416e2ff2

Headers

File Characteristics

Imports

zspool

zsr

zsddm

version

comctl32

kernel32

user32

gdi32

comdlg32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 85KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 68KB - Virtual size: 73KB

.rsrc Size: 44KB - Virtual size: 40KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 88KB - Virtual size: 85KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 68KB - Virtual size: 73KB

.rsrc
Size: 44KB - Virtual size: 40KB

.reloc
Size: 8KB - Virtual size: 6KB