DefaultPrinterProvider[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

DefaultPrinterProvider.dll
Size

21KB
MD5

ed82ba55c4b4393f5f9db70fa66cd585
SHA1

3efcd5321cfa963b241a9a84cd4b119e72f1b302
SHA256

19273f9bc4e91577eb1c18090b233cc9b525bd5681013c3209314dfe31110e6d
SHA512

0af98252f2d3f097abae00cac0a47f38f62dcb089f97436b80eac3a461905953418872e828be777bd8cacccc5702f6268dbe0188fcc03a2dfb6c47cb1390eb05
SSDEEP

384:YaP6e1U0VNtLJiR+L+6AveC1YN6NoWxtNWRpwVD:YaSqZNtLJ0546N9H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DefaultPrinterProvider.dll

Files

DefaultPrinterProvider.dll
.dll windows:10 windows x86 arch:x86

7e1bd919d783a1504294cdf84ac6b636

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DefaultPrinterProvider.pdb

Imports

msvcrt

_purecall
_onexit
__dllonexit
_unlock
_lock
_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
memset

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

SetEvent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjectsEx
CreateEventW
WaitForSingleObject
DeleteCriticalSection

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableFlags
GetTraceLoggerHandle
GetTraceEnableLevel
RegisterTraceGuidsW
TraceMessage
UnregisterTraceGuids

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

CoWaitForMultipleHandles
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoGetMalloc
CoCreateInstance

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
CreateThread

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
FreeLibrary
LoadLibraryExW
DisableThreadLibraryCalls
LoadStringW

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegNotifyChangeKeyValue
RegCloseKey

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

winspool.drv

ord203
OpenPrinterW
GetPrinterDataW
ClosePrinter
ord204

shlwapi

SHStrDupW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e1bd919d783a1504294cdf84ac6b636

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

winspool.drv

shlwapi

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 936B

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 936B