InitializePrintMonitor
Static task
static1
Behavioral task
behavioral1
Sample
1664cc59626b4c49e7b5b7433b42a752.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1664cc59626b4c49e7b5b7433b42a752.dll
Resource
win10v2004-20231215-en
General
-
Target
1664cc59626b4c49e7b5b7433b42a752
-
Size
56KB
-
MD5
1664cc59626b4c49e7b5b7433b42a752
-
SHA1
c5112e19197d1957cb7e99b65d46ce824bed9ae6
-
SHA256
e451e3375e6247aa09134fda38edb059ee60575244a7d192c543e4601cd988ab
-
SHA512
11ef8c4e802f2760c0ec34d1869cc4687074c6d8077ce1e088e3215c1318de7f7ebd52147edab3179c42b63f3a3e3594a7265697c2ea697861d47382d2a15998
-
SSDEEP
192:Zu3RWd3NmGRKgrN2IB36gKyw8NIrPic4ktEer739VXX6WKdYWU2d:ZuajcgrEK6gFkPKy739Vn6WKdYW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1664cc59626b4c49e7b5b7433b42a752
Files
-
1664cc59626b4c49e7b5b7433b42a752.dll windows:5 windows x86 arch:x86
3b390342cd089d3a018a2cf2ae991186
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpyW
lstrlenW
GetLastError
Sleep
GlobalAlloc
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
LoadLibraryW
FreeLibrary
lstrcpynW
MultiByteToWideChar
GetSystemDefaultLangID
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpW
InitializeCriticalSection
GlobalFree
SetLastError
GetProcAddress
msvcrt
sprintf
wcscpy
wcslen
_except_handler3
user32
SetWindowPos
SetForegroundWindow
MoveWindow
GetWindowRect
GetDesktopWindow
SetFocus
SetWindowLongW
EndDialog
KillTimer
GetWindowLongW
DialogBoxParamW
GetDlgItemTextW
EnableWindow
GetDlgItem
WinHelpW
SetDlgItemTextW
LoadIconW
SendDlgItemMessageW
SetWindowTextW
wsprintfW
LoadStringW
SetTimer
spoolss
GetPrinterDataW
RevertToPrinterSelf
ImpersonatePrinterClient
GetJobW
SplIsSessionZero
SplPromptUIInUsersSession
OpenPrinterW
GetPrinterDriverW
SetJobW
SetPortW
ClosePrinter
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ