b14706cf495833c762facfd491105da1f6fdb33111d6f00c9044a2a4e39c92eb

Sharing

Copy URL

Twitter E-mail

General

Target

b14706cf495833c762facfd491105da1f6fdb33111d6f00c9044a2a4e39c92eb
Size

184KB
MD5

6445e4ff9f5d58d8051c44de55a79d86
SHA1

6437120393bd9c809030e5eed5651d828e30d81b
SHA256

b14706cf495833c762facfd491105da1f6fdb33111d6f00c9044a2a4e39c92eb
SHA512

c73f0081978df639fb511631de9b385325ce3db52cb5db1a8396a3ab548c31efba3e28644aed898651cbeb9333f0fd8fa654f13d2e7a2c8c68030f4b8120c803
SSDEEP

3072:riiQDa1DO1uzAluf/9n/+fWMsA67Gp7ClbUbJek2DcYd8Mz:riiQD9uz9fV/+fWMZ6Y47/1dF

Score

N/A

Malware Config

Signatures

Files

b14706cf495833c762facfd491105da1f6fdb33111d6f00c9044a2a4e39c92eb
.exe windows x86

6c7dc218be65608c7d6a2b8563414d11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
RaiseException
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
lstrcmpiA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetStringTypeA
GetStringTypeW
SetFilePointer
GetACP
GetOEMCP
LoadLibraryA
SetConsoleCtrlHandler
SetStdHandle
GetTimeZoneInformation
GetLocaleInfoW
FlushFileBuffers
CloseHandle
CompareStringA
CompareStringW
OutputDebugStringA
SetThreadLocale
Sleep
GetLocaleInfoA
lstrlenA
TlsFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
GetCurrentThreadId
SetEnvironmentVariableA

user32

DdeNameService
DdeCreateStringHandleA
SetDlgItemInt
CheckDlgButton
GetDlgItemInt
IsDlgButtonChecked
LoadStringA
SetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetWindowRect
MoveWindow
EndDialog
GetClientRect
LoadBitmapA
CallWindowProcA
GetWindowLongA
SetWindowLongA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
BeginPaint
TabbedTextOutA
EndPaint
InvalidateRect
EnableMenuItem
CheckMenuItem
SetWindowTextA
UpdateWindow
DialogBoxParamA
PostQuitMessage
DefWindowProcA
SetTimer
KillTimer
MessageBoxA
SendMessageA
PostMessageA
DdePostAdvise
DdeGetData
CharUpperA
GetClipboardFormatNameA
DdeQueryStringA
DdeAddData
DdeCmpStringHandles
DdeCreateDataHandle
DdeAccessData
DdeUnaccessData
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
DdeInitializeA

gdi32

GetStockObject
DeleteObject
BitBlt
SelectObject
GetObjectA
CreateCompatibleDC
CreateFontA
DeleteDC

advapi32

RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gutil

?GetBlock@GHeapSerDev@@UAEJPADJ@Z
?Printf@GString@@QAAHIPAUHINSTANCE__@@ZZ
??4DeviceTable@@QAEABV0@AAV0@@Z
?Load@DeviceDescription@@QAEPAEPAE@Z
?Load@DeviceTable@@QAEPAEPAE@Z
??0GBufferedFileSerDev@@QAE@PADW4SDMODE@@@Z
?GetStatus@GSerDev@@UAE?AW4SDERROR@@XZ
??1GBufferedFileSerDev@@UAE@XZ
?PutBlock@GHeapSerDev@@UAEJPADJ@Z
?GetSize@DeviceDescription@@QAEKXZ
?Save@DeviceDescription@@QAEPAEPAE@Z
?GetSize@DeviceTable@@QAEKXZ
?Save@DeviceTable@@QAEPAEPAE@Z
?Clear@DeviceDescription@@QAEXXZ
?Clear@DeviceTable@@QAEXXZ
?HasGUID@DeviceDescription@@QAEHXZ
?GetStringPointer@GString@@QAEPADXZ
??0DeviceDescription@@QAE@PAD00@Z
??0DeviceTable@@QAE@XZ
?Empty@GString@@QAEHXZ
??4DeviceDescription@@QAEABV0@AAV0@@Z
?Duplicate@DeviceDescription@@QAEPAV1@XZ
?GetProjectName@DeviceDescription@@QAEPADXZ
?GetParameter@ParameterDesc@@QAEPAVParameter@@XZ
?GetParameter@DeviceDescription@@QAEPAVParameterDesc@@K@Z
?GetCount@DeviceDescription@@QAEKXZ
?GetInfoText@DeviceDescription@@QAEPADXZ
?GetName@DeviceDescription@@QAEPADXZ
?GetInstanceName@DeviceDescription@@QAEPADXZ
??8GString@@QAEHPBD@Z
?GetAllocLen@GString@@QAEIXZ
GUtilString
?GetName@ParameterDesc@@QAEPADXZ
?Duplicate@DeviceTable@@QAEPAV1@XZ
??1DeviceDescription@@UAE@XZ
??1DeviceTable@@UAE@XZ
??BGString@@QAEPADXZ
??0GString@@QAE@PBD@Z
??1GString@@QAE@XZ
??4GString@@QAEAAV0@PBD@Z
?AppendText@GString@@QAEHPAD@Z
?Printf@GString@@QAAHPBDZZ
?NAppendText@GString@@QAEHPADH@Z
?Alloc@GString@@QAEIIHH@Z
?AppendChar@GString@@QAEHD@Z

gsymbol

GSymLoginResult
GSymLogoutResult
GSymPLCProjectIdResult
GSymGetProjectId
GSymPLCProjectId
GSymWriteResult
GSymWriteVarList
GSymGetValues
GSymLogout
GSymLogin
GSymSetMotorola
GSymOpenChannel
GSymLoadSymbolsEx
GSymDeleteSymbols
GSymSendVarList
GSymDeleteVarList
GSymCloseChannel
GSymDefineVarList

gclient

GClientDisconnectGateway
ClearGP
GClientSetDWord
GetSizeOfGP
SaveGP
InitGP
GClientConnectGatewayEx
GClientParameterDialog
CopyGP
LoadGP

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c7dc218be65608c7d6a2b8563414d11

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comdlg32

gutil

gsymbol

gclient

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 44KB - Virtual size: 40KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 44KB - Virtual size: 40KB