1d73074d3db06547dafa282b016e69b19fb77d882e8a69b031d38c5ca7f099b6

Sharing

Copy URL Twitter E-mail

General

Target

1d73074d3db06547dafa282b016e69b19fb77d882e8a69b031d38c5ca7f099b6
Size

412KB
MD5

07bd2233907a493f3cbe2a91bd8e4818
SHA1

5a0d968bae90ebdd715ebe442730fc83cd0afc6a
SHA256

1d73074d3db06547dafa282b016e69b19fb77d882e8a69b031d38c5ca7f099b6
SHA512

7d4bfea0b8c8b4b5a37cff2c49a487b89aacfbb713219134d775043355dd8d568174a940cb54b389e18e1eee7330d8729afa9caf6c7cf0c5d36d595578058911
SSDEEP

6144:CmBdohSceb34TupF5HhS6OlX7w2m7cck5Z6zi9x0PNd14vpy5c3J:PHbb34ypPHhSTlX7JZ+5VUvh3J

Score

N/A

Malware Config

Signatures

Files

1d73074d3db06547dafa282b016e69b19fb77d882e8a69b031d38c5ca7f099b6
.exe windows x86

0e43955177bcccd90795a0fe23a1cb3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

modbusm

_ConnectRTU@12
_GetCallState@8
_ConnectTCP2@12
_CloseConnection@4
_ConnectASCII@12
_ConnectDanielsRTU@12
_MODBUSResponse@16
_PollMODBUS@8
_WriteMODBUS@12
_ConnectDanielsASCII@12
_HookRspNotification@16

wsock32

ioctlsocket
WSAStartup
WSACleanup

wtxchg1

_WTXCHG10054@16
_WTXCHG10864@4
_WTXCHG10473@24
_WTXCHG10292@8
_WTXCHG10027@8
_WTXCHG10148@28
_WTXCHG10056@4
_WTXCHG10034@8

kernel32

TerminateProcess
HeapFree
HeapAlloc
GetSystemTime
GetLocalTime
GetACP
HeapReAlloc
GetTimeZoneInformation
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetCommandLineA
GetFullPathNameA
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
RaiseException
ExitProcess
SetEnvironmentVariableA
GetStartupInfoA
SetCurrentDirectoryA
SetErrorMode
RtlUnwind
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetOEMCP
GetFileSize
SizeofResource
LocalReAlloc
GetCPInfo
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GetProcessVersion
LocalAlloc
GlobalFlags
SetFileTime
GetDiskFreeSpaceA
GetFileTime
MulDiv
GetTempFileNameA
GetFileAttributesA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
GlobalAlloc
LocalFree
SetLastError
GetStringTypeExA
GetShortPathNameA
GetThreadLocale
GetVersionExA
GetVolumeInformationA
CreateMutexA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
WriteFile
GetProfileStringA
DuplicateHandle
CreateFileA
GetCurrentProcess
GetModuleFileNameA
GetLastError
lstrcmpA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
InterlockedIncrement
GlobalFree
LoadResource
FreeLibrary
FindResourceA
lstrcmpiA
LockResource
GetCurrentThreadId
GetModuleHandleA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GetProcAddress
lstrcatA
GlobalGetAtomNameA
lstrcpynA
GlobalUnlock
lstrcpyA
GlobalAddAtomA
GetVersion
ReleaseMutex
lstrlenA
WaitForSingleObject
HeapDestroy
HeapCreate
CloseHandle

user32

SetWindowTextA
IsDialogMessageA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetNextDlgTabItem
ModifyMenuA
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
EndDialog
wvsprintfA
LoadCursorA
SetCapture
GetMenuState
GetWindowThreadProcessId
WaitMessage
ClientToScreen
TranslateMessage
GetMessageA
PtInRect
IsZoomed
CharUpperA
PostQuitMessage
ShowOwnedPopups
ValidateRect
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyCursor
SetRect
WindowFromPoint
GetSysColorBrush
GetClassNameA
FillRect
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
FindWindowA
GetTabbedTextExtentA
InflateRect
GetDCEx
LockWindowUpdate
SetParent
GetSysColor
DispatchMessageA
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
RegisterClassA
GetWindowTextLengthA
LoadStringA
DestroyWindow
SetWindowsHookExA
CallNextHookEx
SetDlgItemTextA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetLastActivePopup
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
ShowWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetActiveWindow
wsprintfA
GetParent
GetMenuItemID
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetClientRect
GetWindowLongA
SetWindowLongA
IsWindow
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
CreateWindowExA
BringWindowToTop
GetMenu
GetMenuItemCount
GetSubMenu
ReleaseDC
GetDC
ScreenToClient
GetCursorPos
UpdateWindow
GetWindowRect
LoadBitmapA
KillTimer
SetTimer
SendMessageA
EnableWindow
SendDlgItemMessageA
GetWindowTextA
MapWindowPoints
DefWindowProcA
IntersectRect
InvalidateRect
GetKeyState
GetClassLongA
ShowCaret
HideCaret
DrawFocusRect
UnregisterClassA
CharNextA
IsWindowUnicode
ExcludeUpdateRgn
DefDlgProcA

gdi32

CreateDIBitmap
BitBlt
GetDeviceCaps
CreateCompatibleDC
GetTextExtentPoint32A
GetTextMetricsA
Rectangle
GetClipBox
SetTextColor
GetObjectA
CreateBitmap
SetBkColor
StretchDIBits
SelectObject
DeleteDC
DeleteObject
GetCharWidthA
CreateCompatibleBitmap
StartDocA
SaveDC
GetStockObject
RestoreDC
SetPolyFillMode
SetROP2
SetBkMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetTextExtentPointA
CreateRectRgn
GetViewportExtEx
CreatePen
GetWindowExtEx
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
DPtoLP
GetViewportOrgEx
PatBlt
EndDoc
EndPage
AbortDoc
SetAbortProc
CreateDCA
StartPage
CreateFontIndirectA
LPtoDP
CreateRectRgnIndirect
GetNearestColor
GetTextColor
GetBkColor
GetPolyFillMode
GetTextAlign
GetStretchBltMode
GetROP2
GetTextFaceA
GetBkMode
SetRectRgn
GetWindowOrgEx
CombineRgn

comdlg32

PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegSetValueExA
RegDeleteValueA

shell32

ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

oleaut32

VariantClear
VariantInit
VariantChangeType

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0e43955177bcccd90795a0fe23a1cb3f

Headers

File Characteristics

Imports

modbusm

wsock32

wtxchg1

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oleaut32

Sections

.text Size: 228KB - Virtual size: 226KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 228KB - Virtual size: 226KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 108KB - Virtual size: 108KB