InitializePrintMonitorUI
Static task
static1
Behavioral task
behavioral1
Sample
aa05bc4afd9daf28a10e3db2c65470d920ebec45bc8dda973a156e99003dc32f.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
aa05bc4afd9daf28a10e3db2c65470d920ebec45bc8dda973a156e99003dc32f.dll
Resource
win10v2004-20240221-en
General
-
Target
aa05bc4afd9daf28a10e3db2c65470d920ebec45bc8dda973a156e99003dc32f
-
Size
391KB
-
MD5
43e863cdebd7a9e2e071387693ee89d9
-
SHA1
534ead1741492f78ea4bd271641bda63e710d098
-
SHA256
aa05bc4afd9daf28a10e3db2c65470d920ebec45bc8dda973a156e99003dc32f
-
SHA512
f152f8183338cc3d3f6d358d859b74ff8ed1b86fbd256ae5a0786a2ab23bd14c928b46dd68ab0967ef2097a3ab9911dada23ea7b4d0ba2593e9176ee155bce89
-
SSDEEP
6144:J9kl4zJdZABD4rYbC9KXeTw9415+T+pWCvl5GXEUiYI:7kiViDow9k+TIWCvPGXi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa05bc4afd9daf28a10e3db2c65470d920ebec45bc8dda973a156e99003dc32f
Files
-
aa05bc4afd9daf28a10e3db2c65470d920ebec45bc8dda973a156e99003dc32f.dll windows:5 windows x86 arch:x86
a44b9b47c718be6098f7b0c4d1131740
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsnmp32
ord220
ord101
ord400
ord300
ord203
ord600
ord903
ord605
ord500
ord204
ord205
ord999
ord501
ord604
ord504
ord602
ord201
ord200
kernel32
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCommandLineA
HeapReAlloc
RaiseException
Sleep
ExitProcess
VirtualAlloc
HeapSize
HeapCreate
HeapDestroy
VirtualFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
WritePrivateProfileStringW
GlobalFlags
FindResourceExW
InterlockedIncrement
lstrlenA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
InterlockedExchange
InterlockedDecrement
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeResource
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
VirtualProtect
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
GetSystemDefaultLangID
FormatMessageW
GetSystemDirectoryW
SetLastError
VerifyVersionInfoW
VerSetConditionMask
OutputDebugStringW
SetEvent
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventW
GlobalAlloc
GlobalFree
GetProcAddress
GetLastError
FreeLibrary
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetPrivateProfileStringW
RtlUnwind
user32
UnregisterClassW
GetSysColorBrush
LoadCursorW
DestroyMenu
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
PtInRect
GetMenu
SetWindowLongW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetDesktopWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
GetSysColor
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetPropW
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetPropW
RemovePropW
GetAsyncKeyState
GetFocus
SetFocus
GetWindowRect
GetWindowLongW
GetDlgItem
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
MapWindowPoints
GetMenuCheckMarkDimensions
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
LoadStringW
IsWindow
EnableWindow
PostMessageW
SendMessageW
GetParent
wsprintfW
CopyRect
gdi32
SetMapMode
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SetTextColor
PtVisible
EnumFontFamiliesExW
CreateBitmap
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateFontIndirectW
GetObjectW
GetStockObject
CreateSolidBrush
DeleteObject
GetClipBox
RectVisible
winspool.drv
ClosePrinter
XcvDataW
OpenPrinterW
DocumentPropertiesW
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shlwapi
PathFindFileNameW
PathFindExtensionW
oleaut32
VariantInit
VariantChangeType
VariantClear
wsock32
inet_addr
WSAStartup
closesocket
bind
socket
gethostname
WSAGetLastError
WSASetLastError
WSACleanup
ws2_32
WSAEnumProtocolsW
WSAStringToAddressA
WSAAddressToStringA
freeaddrinfo
getaddrinfo
Exports
Exports
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ