C:\Users\star\Desktop\windowsSdk\windows_sdk\Release\x64\printer.sdk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fb4fc83b1cc420188b0e50b44068fb71c315762d35c308a2a062eb626670ff4d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb4fc83b1cc420188b0e50b44068fb71c315762d35c308a2a062eb626670ff4d.dll
Resource
win10v2004-20240226-en
General
-
Target
fb4fc83b1cc420188b0e50b44068fb71c315762d35c308a2a062eb626670ff4d
-
Size
357KB
-
MD5
5af6fcce3f77abb6e3652bd69a94c87f
-
SHA1
e0c305fdf885bed04684b6955b043a9019f2d78e
-
SHA256
fb4fc83b1cc420188b0e50b44068fb71c315762d35c308a2a062eb626670ff4d
-
SHA512
eb72f4dc74e130247abb2c9855361e748b602b2eeb69d7d7cc1b29fe2c5aed838a50cc0d71f2b9d38ad281cef0b4d72474110fdb57d2d25ec3236169dc5e3201
-
SSDEEP
6144:e2hYtZ5ANAsirtL//0R8kBC8FJJJYxvo3ohbCYf3JMSwUN5Y:VgxLER8kYSJ42o4M3xY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb4fc83b1cc420188b0e50b44068fb71c315762d35c308a2a062eb626670ff4d
Files
-
fb4fc83b1cc420188b0e50b44068fb71c315762d35c308a2a062eb626670ff4d.dll windows:6 windows x64 arch:x64
4d498f3231352927e8fccaef3d7328b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LocalFree
SizeofResource
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
HeapSize
LockResource
HeapReAlloc
FindResourceExW
Sleep
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
MultiByteToWideChar
SetEndOfFile
GetFileSizeEx
FlushFileBuffers
LocalAlloc
WideCharToMultiByte
SetCommState
SetCommTimeouts
GetOverlappedResult
CloseHandle
GetCommState
CreateEventW
GetLastError
CreateFileW
WaitForSingleObject
WriteFile
LoadResource
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetConsoleOutputCP
SetStdHandle
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualProtect
VirtualAlloc
GetSystemInfo
RtlUnwind
LoadLibraryExW
WriteConsoleW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStringTypeW
EncodePointer
LCMapStringEx
GetCPInfo
OutputDebugStringW
RaiseException
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
TlsAlloc
gdi32
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GetPixel
DeleteDC
GetObjectW
DeleteObject
SelectObject
advapi32
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
ws2_32
send
WSAStartup
inet_pton
htons
closesocket
socket
WSACleanup
setsockopt
sendto
freeaddrinfo
connect
ioctlsocket
WSAGetLastError
__WSAFDIsSet
recv
select
recvfrom
bind
getaddrinfo
gethostname
inet_ntop
setupapi
SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
gdiplus
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipFree
GdipGetImagePixelFormat
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipGetImagePaletteSize
Exports
Exports
CPCL_Abort
CPCL_AddBarCode
CPCL_AddBarCodeText
CPCL_AddBox
CPCL_AddImage
CPCL_AddImageData
CPCL_AddLabel
CPCL_AddLine
CPCL_AddPDF417
CPCL_AddQRCode
CPCL_AddText
CPCL_GetPrinterStatus
CPCL_NextLabelPos
CPCL_PostFeed
CPCL_PreFeed
CPCL_Print
CPCL_SetAlign
CPCL_SetDensity
CPCL_SetFontSize
CPCL_SetLeftMargin
CPCL_SetSpeed
CPCL_SetTextBold
CPCL_SetTextSpacing
CPCL_SetTextUnderline
CancelPrintDataInPageMode
ClosePort
CutPaper
CutPaperWithDistance
DefineNVImageCompatible
DefineNVImageCompatible2
DefineUserDefinedCharacters
DeleteUserDefinedCharacter
EnableBlackMark
EnableUserDefinedCharacter
FeedLine
FirmwareUpgrade
GetCopyRight
GetPrinterState
GetSdkVer
GoHomeWithBlackMark
InitPrinter
ListComPorts
ListPrinters
OpenCashDrawer
OpenPort
OpenPortSync
PositionNextLabel
PrintAndFeedLine
PrintAndReturnStandardMode
PrintBarCode
PrintDataInPageMode
PrintDownloadedImageCompatible
PrintImage
PrintImage1
PrintNVImage
PrintNVImageCompatible
PrintSelfTest
PrintSymbol
PrintText
PrintTextS
PrinterInitialize
ReadData
ReadDataLoop
ReleasePrinter
SearchEscNetDevice
SelectPageMode
SelectPrintDirectionInPageMode
SelectStandardMode
SetAbsolutePrintPosition
SetAbsoluteVerticalPrintPositionInPageMode
SetAlign
SetBlackMarkAdjust
SetBlackMarkDistance
SetBlackMarkHeight
SetCharacterPitch
SetCodePage
SetEscNetInfo
SetHorizontalAndVerticalMotionUnits
SetInternationalCharacter
SetPrintAreaInPageMode
SetPrintSpeed
SetRelativeHorizontal
SetTextBold
SetTextFont
SetTextLineSpace
TSPL_Bar
TSPL_BarCode
TSPL_BitMap
TSPL_Block
TSPL_Box
TSPL_ClearBuffer
TSPL_Diagonal
TSPL_Direction
TSPL_Dmatrix
TSPL_Feed
TSPL_FormFeed
TSPL_GapDetect
TSPL_GetPrinterStatus
TSPL_GetSN
TSPL_Home
TSPL_Image
TSPL_Learn
TSPL_Offset
TSPL_PDF417
TSPL_Print
TSPL_QrCode
TSPL_Reverse
TSPL_SelfTest
TSPL_SetCodePage
TSPL_SetCutter
TSPL_SetRibbon
TSPL_SetTear
TSPL_Setup
TSPL_Text
Verifycmd
WriteData
ZPL_AnsiCodebar
ZPL_AztecBarcode
ZPL_BarCode11
ZPL_BarCode128
ZPL_BarCode25
ZPL_BarCode39
ZPL_BarCode49
ZPL_BarCode93
ZPL_CodeEan13
ZPL_CodeEan8
ZPL_DataMatrixBarcode
ZPL_EndFormat
ZPL_FieldHexadecimalIndicator
ZPL_FirmwareUpgrade
ZPL_FontDownload
ZPL_GetLabelLength
ZPL_GetLabelWidth
ZPL_GetPrinterDpi
ZPL_GetPrinterFirmwareVersion
ZPL_GetPrinterIpAddress
ZPL_GetPrinterMacAddress
ZPL_GetPrinterModel
ZPL_GetPrinterName
ZPL_GetPrinterOdometer
ZPL_GetPrinterSeriesNumber
ZPL_GetPrinterStatus
ZPL_GraphicBox
ZPL_GraphicCircle
ZPL_GraphicDiagonalLine
ZPL_GraphicEllipse
ZPL_GraphicSymbol
ZPL_HostStatusReturn
ZPL_LearnLabel
ZPL_LogMarsBarcode
ZPL_MicroPdf417
ZPL_MsiBarcode
ZPL_OpenNetDhcp
ZPL_Pdf417
ZPL_PlanetCode
ZPL_PlesseyBarcode
ZPL_PostalBarcode
ZPL_PrintConfigurationLabel
ZPL_PrintDirectoryLabel
ZPL_PrintImage
ZPL_QRCode
ZPL_ScalableFontText
ZPL_SetChangeCaret
ZPL_SetChangeDefaultFont
ZPL_SetChangeDelimiter
ZPL_SetChangeFontEncoding
ZPL_SetChangeTilde
ZPL_SetDiagnosticsMode
ZPL_SetLabelHome
ZPL_SetLabelLength
ZPL_SetLabelReversePrint
ZPL_SetLabelShift
ZPL_SetLabelTop
ZPL_SetMediaSensorCalibration
ZPL_SetMediaTracking
ZPL_SetMediaType
ZPL_SetPowerOnReset
ZPL_SetPrintDarkness
ZPL_SetPrintDefaultGateway
ZPL_SetPrintMode
ZPL_SetPrintNetSetting
ZPL_SetPrintOrientation
ZPL_SetPrintQuantity
ZPL_SetPrintRate
ZPL_SetPrintWidth
ZPL_SetPrinterBluetoothPIN
ZPL_SetPrinterBluetoothSSID
ZPL_SetPrinterShutdownTime
ZPL_SetPrinterSleepTime
ZPL_SetPrintingMirrorImage
ZPL_SetReprintAfterError
ZPL_SetSerialCommunications
ZPL_SetSerializationField
ZPL_SetTearOffAdjustPosition
ZPL_SetUserFontName
ZPL_SetWriteQuery
ZPL_SlewToHomePosition
ZPL_StartFormat
ZPL_Text
ZPL_Text_Block
ZPL_UpcExtensions
ZPL_UpcaBarcode
ZPL_UpceCode
ZPL_WifiConfig
mDefineNVImage
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ