33bab6e24afa49f788f677eb36a4916467309e9b2e0f282670059b836c1f3b83

Sharing

Copy URL Twitter E-mail

General

Target

33bab6e24afa49f788f677eb36a4916467309e9b2e0f282670059b836c1f3b83
Size

92KB
MD5

0ef08a653f259d7021945cdc12fd4410
SHA1

c6744214378a9a4164e2f0b6795cb916c19add43
SHA256

33bab6e24afa49f788f677eb36a4916467309e9b2e0f282670059b836c1f3b83
SHA512

8117d0d1004f9248883f9a560a4b35cd0dafe63d6b1c4bdf9619e21a6cf4ca43297b8fee712f5ae5d447f033608073bf3c67d4317580a082b5a6de487484e0aa
SSDEEP

1536:vlXwMkHq9AvjBJAyB4mheF/TjalHfSF02KfknEy:ve/Hq9yzNgF7kfdTfknv

Score

N/A

Malware Config

Signatures

Files

33bab6e24afa49f788f677eb36a4916467309e9b2e0f282670059b836c1f3b83
.dll windows x86

1932c2b77207383f2e634f84d63c64d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord825
ord823

msvcrt

malloc
free
_except_handler3
sprintf
_initterm
_adjust_fdiv

kernel32

Sleep
WaitForSingleObject
ReleaseMutex
CloseHandle
OpenMutexA
CreateMutexA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
FreeLibrary

user32

MessageBoxA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Astar_CheckKey
Astar_ControlLED_OnOff
Astar_FpRecDataFromDevice
Astar_FpSendCommand
Astar_FpSendDataToDevice
Astar_GetIICData
Astar_GetModelVersion
Astar_GetMutexHandle
Astar_GetPLImageSize
Astar_GetProductInfo
Astar_GetSetupInfo
Astar_GetUserProductInfo
Astar_InitAstar22
Astar_PutProductInfo
Astar_PutSetupInfo
Astar_PutUserProductInfo
Astar_RecDataFromDevice
Astar_RecExeResult
Astar_RecImageFromDevice
Astar_RecPLImageFromDevice
Astar_ResetDevice
Astar_SendCommand
Astar_SendDataToDevice
Astar_SetIICData
Astar_SetPLImageSize
Astar_SetWatchdog

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MY_SEG
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1932c2b77207383f2e634f84d63c64d3

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 368B

MY_SEG Size: 4KB - Virtual size: 8B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 634B

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 368B

MY_SEG
Size: 4KB - Virtual size: 8B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 634B

.rmnet
Size: 60KB - Virtual size: 60KB