9c39272e1d222ef9dc0e9de1b6e1e7ccf2d39d0afc86a873c23d0f878ee04f5d

Sharing

Copy URL Twitter E-mail

General

Target

9c39272e1d222ef9dc0e9de1b6e1e7ccf2d39d0afc86a873c23d0f878ee04f5d
Size

86KB
MD5

f70917cd78660b80591227ed16bf2350
SHA1

5aa94f98126a2cf79d886cfdbaecc8dabb0b11bf
SHA256

9c39272e1d222ef9dc0e9de1b6e1e7ccf2d39d0afc86a873c23d0f878ee04f5d
SHA512

b901bed44faa8fd7fd6a8c5160f8d69a40ea71a3146c401560021784bc47b3bacddb2b9563021e89731a8832eb26bbd28f7ddffa275bceb58a806a08037f3d52
SSDEEP

1536:mYygHcjjkALK9Yxh8mk4CEWpBubgNUmMz6hq7V3rcn9sA9NJ7ev+KUskuE:mYbHngagatBOgNGKu+KUsxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c39272e1d222ef9dc0e9de1b6e1e7ccf2d39d0afc86a873c23d0f878ee04f5d

Files

9c39272e1d222ef9dc0e9de1b6e1e7ccf2d39d0afc86a873c23d0f878ee04f5d
.dll windows:6 windows x86 arch:x86

c9b4fe8534fdc211080f1d70250ea0e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
InitializeCriticalSection
SetLastError
GlobalFree
GetModuleFileNameW
WriteFile
GetTickCount
ReadFile
WaitForSingleObject
SetEvent
CloseHandle
SetCommTimeouts
GetCommTimeouts
DeleteCriticalSection
DisableThreadLibraryCalls
DefineDosDeviceW
GetProfileIntW
SetEndOfFile
lstrcmpiW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
SetDefaultCommConfigW
GetDefaultCommConfigW
WriteProfileStringW
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetLastError
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
GetConsoleCP
GetConsoleMode
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryExA
Sleep
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcessHeap
VirtualProtect
GetSystemInfo
VirtualQuery
GetEnvironmentStrings
GetLocalTime

user32

LoadStringW

ws2_32

WSACreateEvent
WSAGetOverlappedResult
WSASend
shutdown
WSAGetLastError
WSACloseEvent
closesocket
WSAResetEvent

spoolss

OpenPrinterW
ClosePrinter
GetJobW
SetJobW
GetPrinterDataW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9b4fe8534fdc211080f1d70250ea0e9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

spoolss

setupapi

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 73KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 73KB - Virtual size: 73KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB