Static task
static1
Behavioral task
behavioral1
Sample
制作纯DOS启动U盘刷新BIOS/DOS/COMMAND.com
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
制作纯DOS启动U盘刷新BIOS/DOS/COMMAND.com
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
制作纯DOS启动U盘刷新BIOS/HP优盘格式化工具HPUSBFW 2.20.exe
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
制作纯DOS启动U盘刷新BIOS/HP优盘格式化工具HPUSBFW 2.20.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
制作纯DOS启动U盘刷新BIOS/af10_bios/AFUDOS.exe
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
制作纯DOS启动U盘刷新BIOS/af10_bios/AFUDOS.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
制作纯DOS启动U盘刷新BIOS/af10_bios/af10.bat
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
制作纯DOS启动U盘刷新BIOS/af10_bios/af10.bat
Resource
win10v2004-20220414-en
General
-
Target
4a4435f10525fe4aae1648ac9b429ed54eaa31154374388675a5f6d1c490fac4
-
Size
2.4MB
-
MD5
3aded89026cf2bdfcbfaece1ee16ef9b
-
SHA1
6fbdca3df0d44f0405d17e0729c4e83f1dc45498
-
SHA256
4a4435f10525fe4aae1648ac9b429ed54eaa31154374388675a5f6d1c490fac4
-
SHA512
ba99944da1b75403f2f55cc8341ef6813caeac0584d4def059d68ee3b23f73121434a6c23e669f089be586d0371da9fec14f74dc6bd9f5207310cc93ca1c78f8
-
SSDEEP
49152:RpRoSXtY2w/Cx8zlRAtdaTJdoi9dvfX7ONPRP8rL/XIyk8kTzec:rGItB4Cx8znAL8FOZRgg8Kzec
Malware Config
Signatures
Files
-
4a4435f10525fe4aae1648ac9b429ed54eaa31154374388675a5f6d1c490fac4.rar
-
制作纯DOS启动U盘刷新BIOS/BIOS 刷新完成界面.jpg
-
制作纯DOS启动U盘刷新BIOS/DOS/COMMAND.COM
-
制作纯DOS启动U盘刷新BIOS/DOS/DRVSPACE.BIN
-
制作纯DOS启动U盘刷新BIOS/DOS/IO.SYS
-
制作纯DOS启动U盘刷新BIOS/HP优盘格式化工具HPUSBFW 2.20.exe.exe windows x86
62aaaf892f2ed84f7da3b88008a9821b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
SetFilePointerEx
WriteFile
FindClose
FindFirstFileW
GetTickCount
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetFileAttributesW
GetFullPathNameW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
SetFileTime
GetFileSize
GetFileTime
SetFileAttributesW
FindNextFileW
CopyFileW
ReadFile
LoadResource
FindResourceW
SetVolumeMountPointW
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
GetLogicalDrives
Sleep
CreateThread
GetCommandLineW
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetStdHandle
GetOEMCP
GetACP
LoadLibraryA
InterlockedExchange
GetCPInfo
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
GetLogicalDriveStringsW
GetDriveTypeW
CreateFileW
GetLastError
DeviceIoControl
CloseHandle
FormatMessageW
LocalFree
OutputDebugStringW
LockResource
SetFilePointer
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
VirtualProtect
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
user32
PostMessageW
EndDialog
GetWindowTextW
GetWindowRect
SystemParametersInfoW
MoveWindow
GetSystemMenu
AppendMenuW
GetDlgItem
SetFocus
SetWindowTextW
EnableWindow
SendMessageW
LoadStringW
MessageBoxW
FindWindowW
SetForegroundWindow
DialogBoxParamW
advapi32
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
ole32
CoInitializeEx
CoUninitialize
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SharedD Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
制作纯DOS启动U盘刷新BIOS/af10_bios/0NINA507.rom
-
制作纯DOS启动U盘刷新BIOS/af10_bios/AFUDOS.exe
-
制作纯DOS启动U盘刷新BIOS/af10_bios/af10.bat
-
制作纯DOS启动U盘刷新BIOS/使用说明.txt