e:\code_master\coinstaller\deletepnpqueue\tm-t70ii\objfre_wxp_x86\i386\eaptmcoTMT70II.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eaptmcoTMT70II.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
eaptmcoTMT70II.dll
Resource
win10v2004-20240508-en
General
-
Target
eaptmcoTMT70II.dll
-
Size
14KB
-
MD5
d84a45342f7c107da96f279fd4c033f5
-
SHA1
6d92723b36a493abd8b8dd7f987ce0fd5b09c45d
-
SHA256
e70d1d14428ee574fd88b8a941563cb165e12a3b827d5da9164357b4e4f45a9a
-
SHA512
5ae5cc76c214814bb2e4504559a7526d3f258cf9671d128b8875631285fa29b5f6bb87951b1a9ebe42e927d0dd36d86634e1e40e43da93db1a78087912f28b2e
-
SSDEEP
192:AiuiZiPi4iJPHhwwHMj+lyF0h8aa/sfUCv/v9Z8U3T3QFgAbLG0Ibrtp1fcOr7a+:OjcyFVBsfF/FZ8cGHeZp1z66usXRUY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaptmcoTMT70II.dll
Files
-
eaptmcoTMT70II.dll.dll windows:6 windows x86 arch:x86
622e5165b0a9985c496fb2c0b16c199d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_errno
realloc
wcsncmp
memset
malloc
free
setupapi
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetSelectedDriverW
kernel32
GetLastError
GlobalFree
GlobalAlloc
WaitForSingleObject
CloseHandle
CreateEventW
SetEvent
WaitForMultipleObjects
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InterlockedExchange
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
CreateThread
advapi32
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
winspool.drv
ClosePrinter
DeletePrinter
OpenPrinterW
GetPrinterW
FindClosePrinterChangeNotification
FreePrinterNotifyInfo
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumPrintersW
Exports
Exports
EpsonTMCoInstaller
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ