General

  • Target

    da9219a43018e51c0a27617ea30035cf99dedfafebeddcdada50babbf7ae7cfd

  • Size

    1.9MB

  • MD5

    b6827bc5f37d9b56196656174be3f939

  • SHA1

    44fd6f79179b4ae55047fa5b7e63277dd0c34978

  • SHA256

    da9219a43018e51c0a27617ea30035cf99dedfafebeddcdada50babbf7ae7cfd

  • SHA512

    07a30c99603d6f90305d61320c05f17ce85d2406f147fb21a7330151530de97781e2e44dabd8df891c17c04139fe1d93abc51463f9db480da603e563fcbd0e63

  • SSDEEP

    49152:woLwcI+8Wgxjd+W1ZKPe0ILHsUc7wS9DkSZKp9NRgc11TGA:vLIXdRz2m0HUc7wS9VUBRgc11CA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • da9219a43018e51c0a27617ea30035cf99dedfafebeddcdada50babbf7ae7cfd
    .rar
  • printerfix.zip
    .zip
  • printerfix/?????/localspl.dll.good
    .dll windows:10 windows x86 arch:x86

    be84819b6bb3e827db435acecada71c7


    Headers

    Imports

    Exports

    Sections

  • printerfix/?????/spoolsv.exe.good
    .exe windows:10 windows x86 arch:x86

    45c3b9ac808008aaa97009ccd46387e5


    Headers

    Imports

    Exports

    Sections

  • printerfix/?????/win32spl.dll.good
    .dll windows:10 windows x86 arch:x86

    cca0740d2d70546aa162102eb9968d2f


    Headers

    Imports

    Exports

    Sections

  • printerfix/??win10-20H???/Fix_PrintSpooler.bat
  • printerfix/??win10-20H???/win32spl.dll
    .dll windows:10 windows x64 arch:x64

    9b4c47f536113027c96709d675fc48fe


    Headers

    Imports

    Exports

    Sections

  • printerfix/LTSC/Fix_PrintSpooler.bat
  • printerfix/LTSC/win32spl.dll
    .dll windows:10 windows x64 arch:x64

    309f431c2ba81c9df4a167d2d9ab73e3


    Headers

    Imports

    Exports

    Sections

  • printerfix/Win 2012/Fix_PrintSpooler.bat
  • printerfix/Win 2012/win32spl.dll
    .dll windows:6 windows x64 arch:x64

    1bf6b28e4dcf0e524931827a2aa8a663


    Headers

    Imports

    Exports

    Sections

  • printerfix/Win 2016/Fix_PrintSpooler.bat
  • printerfix/Win 2016/win32spl.dll
    .dll windows:10 windows x64 arch:x64

    ba393fc359f1b4010d451706802a5a14


    Headers

    Imports

    Exports

    Sections

  • printerfix/Win 2019/Fix_PrintSpooler.bat
  • printerfix/Win 2019/win32spl.dll
    .dll windows:10 windows x64 arch:x64

    b97b7eb8848158f50d1d0b3f7536e4c1


    Headers

    Imports

    Exports

    Sections

  • printerfix/win7/Fix_PrintSpooler.bat
  • printerfix/win7/win32spl.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    ec6a1c4bd7818dd4fb73466d2b5c7981


    Headers

    Imports

    Exports

    Sections

  • 使用说明.txt
  • 当下软件园.url