dc3612ce472098fd95296c39d098af7a49644f5a9d47100c239ced32aad19cdf

Sharing

Copy URL Twitter E-mail

General

Target

dc3612ce472098fd95296c39d098af7a49644f5a9d47100c239ced32aad19cdf
Size

204KB
MD5

6e030a31c7797fa66781fa9bbb0c1cc0
SHA1

ff77ac655feb0feeed575d84a4ff4a3c288e137c
SHA256

dc3612ce472098fd95296c39d098af7a49644f5a9d47100c239ced32aad19cdf
SHA512

a7e19e2da2240f2b75de32bdb40c56465d01eaef7da8441040bfdccc36fdba79366acfd52bfc8ca79a0a9a4d83716122076b4cab07bc643941bda1b0fba4479e
SSDEEP

3072:XLtA0lSzqw+MgTkUX3Xp3mSIlbrHbfwxSYG1O0hxqvLK9y3:X5Jnw+vkUX3X9o5fw6EBMy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc3612ce472098fd95296c39d098af7a49644f5a9d47100c239ced32aad19cdf

Files

dc3612ce472098fd95296c39d098af7a49644f5a9d47100c239ced32aad19cdf
.dll windows:6 windows x86 arch:x86

30d40ce4772ea7627625a2d6e5fb6ad1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateEventA
CreateFileA
DeviceIoControl
FreeLibrary
GetProcAddress
GetVersion
SetLastError
Sleep
GetFileSize
SetFilePointer
SleepEx
LoadLibraryA
WaitCommEvent
DeleteFileA
ClearCommError
MultiByteToWideChar
WideCharToMultiByte
GetSystemDefaultLangID
WriteConsoleW
SetStdHandle
HeapReAlloc
LCMapStringW
SetCommTimeouts
SetCommState
SetCommMask
PurgeComm
GetCommState
EscapeCommFunction
GetModuleFileNameA
SetupComm
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
GetConsoleMode
CloseHandle
FlushFileBuffers
ReadFile
WriteFile
WaitForSingleObject
ResetEvent
SetEvent
ResumeThread
GetOverlappedResult
GetLastError
CreateThread
TerminateThread
GetVersionExA
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
RaiseException
RtlUnwind
HeapFree
HeapAlloc
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
CreateFileW

user32

GetDC
wsprintfA
CharUpperA
LoadImageA
ReleaseDC

gdi32

SetPixelV
SelectObject
GetPixel
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA

advapi32

RegCloseKey

ws2_32

closesocket
connect
htons
inet_addr
recv
send
socket
WSAStartup
WSACleanup

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

Exports

Exports

CutPaper
EnumUSBDeviceSerials
FeedPaper
InitPrinter
OpenUSBDeviceBySerial
OpenUsbPrtByName
POS_BeginSaveFile
POS_Close
POS_CutPaper
POS_EndDoc
POS_EndSaveFile
POS_FeedLine
POS_GetHWVersionInfo
POS_GetSWVersionInfo
POS_KickOutDrawer
POS_NETQueryStatus
POS_Open
POS_PL_Clear
POS_PL_DownloadAndPrintBmp
POS_PL_Print
POS_PL_PrintBmpInRAM
POS_PL_SetArea
POS_PL_SetBarcode
POS_PL_TextOut
POS_PreDownloadBmpToRAM
POS_PreDownloadBmpsToFlash
POS_QueryStatus
POS_RTQueryStatus
POS_ReadFile
POS_Reset
POS_S_DownloadAndPrintBmp
POS_S_PrintBmpInFlash
POS_S_PrintBmpInRAM
POS_S_PrintQR
POS_S_SetAreaWidth
POS_S_SetBarcode
POS_S_TextOut
POS_SetCharSetAndCodePage
POS_SetHandle
POS_SetLineSpacing
POS_SetMode
POS_SetMotionUnit
POS_SetRightSpacing
POS_StartDoc
POS_WriteData
POS_WriteFile
Print2DCode
PrintBmp
PrintDataMatrixCode
PrintLine
PrintPDF417
PrintPDF417Code
PrintQRCode
PrintRaster24Bmp
PrintString
SetAbsPrnPos
SetBlackMark
SetLeftDistance
SetPDF417Level
SetPDF417ModHeight
SetPDF417ModWidth
SetPDF417RowCol
SetPrintFont
SetQRLevel
SetQRModSize
SetRowDistance
SetStdPDF417
YkCancelPrintInPM
YkCancelUserDefChar
YkClockwiseD90
YkCloseDevice
YkCutPaper
YkDefineBitmap
YkDefineControl
YkDirectIO
YkDisableChineseMode
YkDoTestPrint
YkDownloadBitmapAndPrint
YkEnableASB
YkEnableBM
YkEnableCallBack
YkEnableChineseMode
YkEnableChineseUnderLine
YkEnablePM
YkEnablePanelButton
YkEnableSmoothPrn
YkEnableUnderLine
YkEnableUpsidedown
YkEnableUserDefineChar
YkEnter
YkEnterSM
YkFeedPaper
YkFeedToStartPos
YkGetDeviceHandle
YkGetMemorySwitch
YkGetPrinterID
YkGetPrinterStatus
YkGetState
YkGetStatus
YkGetStatus_usb
YkGetStatus_usbEx
YkGetUSBState
YkGetVersion
YkInitPrinter
YkIsConnected
YkMoveBack
YkMoveBack_f
YkOpenDevice
YkOpenTheDoor
YkOverlap
YkPrintBarCode
YkPrintBitmap
YkPrintBitmapMatrix
YkPrintDefineBitmap
YkPrintInPM
YkPrintRasterBmp
YkPrintStr
YkPrintStr_utf8
YkPrnAndBackToStd
YkPrnAndFeedLine
YkPrnAndFeedPaper
YkReadSerialNo
YkReset
YkResponse
YkSelectFont
YkSetAbsPrnPos
YkSetAbsVertPosInPM
YkSetAlign
YkSetBarCodeHeight
YkSetBarCodeWidth
YkSetBlackMarkParam
YkSetCallBack
YkSetCashBoxDriveMode
YkSetCharCodeTable
YkSetCharRightSpace
YkSetCharSize
YkSetChinese4TimesSize
YkSetChineseFontStyle
YkSetChineseLeftRightSpace
YkSetDefaultLineSpace
YkSetDirectionInPM
YkSetEmphasized
YkSetFontStyle
YkSetHRICharStyle
YkSetHRIPos
YkSetInterCharSet
YkSetLeftMargin
YkSetLineSpace
YkSetMemorySwitch
YkSetPaperSensor
YkSetPrnAreaInPM
YkSetPrnAreaWidth
YkSetRelPrnPos
YkSetRelVertPosInPM
YkSetSensorToStopPrint
YkSetTabPos
YkSetUserDefChinese
YkSetUserDefChineseArea
YkSetUserDefineChar
YkTabMove
YkTakeBackPaper
YkToLineHome
YkUserDefCmd
YkWriteSerialNo

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30d40ce4772ea7627625a2d6e5fb6ad1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

setupapi

Exports

Exports

Sections

.text Size: 141KB - Virtual size: 140KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 23KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 141KB - Virtual size: 140KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 23KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 9KB