314a96352f1f3062993e574ba156259340367628db2ccdc50976a87ad1479d54

Sharing

Copy URL Twitter E-mail

General

Target

314a96352f1f3062993e574ba156259340367628db2ccdc50976a87ad1479d54
Size

164KB
MD5

0a5767551ac04be8440b178672c6dfe0
SHA1

17c1eedb74c20384271494fd96f03a4237cacc98
SHA256

314a96352f1f3062993e574ba156259340367628db2ccdc50976a87ad1479d54
SHA512

b9ee0584c8d3583a0393beff12108c97dfba1218512bb29b679f4d9e530212acc03bac3205f6a5096664132bcdbfadb04f51257986858194e78b11a3c63a52a4
SSDEEP

3072:jD4uwzpYZS01A712VEmdl7Ze8/NqJyG1fZcl4IieVkvijxJUe2h:34uwKjOIfZe8/NqEG5e4IFVDtaj

Score

N/A

Malware Config

Signatures

Files

314a96352f1f3062993e574ba156259340367628db2ccdc50976a87ad1479d54
.dll windows x86

dbf90725a6f9ee90e9e3fc77013506cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hid

HidD_GetHidGuid
HidD_FlushQueue
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetAttributes

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

kernel32

GetSystemInfo
VirtualProtect
CreateFileA
WaitForSingleObject
GetLastError
CreateMutexA
ReleaseMutex
GetVersionExA
CloseHandle
WriteFile
CreateEventA
ReadFile
GetOverlappedResult
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
SetStdHandle
RtlUnwind
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

Exports

Exports

ETChangeDir
ETChangePin
ETClose
ETControl
ETCreateDir
ETCreateDirEx
ETCreateFile
ETEnum
ETEraseDir
ETExecute
ETFormatErrorMessage
ETGenRsaKey
ETOpen
ETOpenEx
ETVerifyPin
ETWriteFile
ETWriteFileEx
TransmitAPDU

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dbf90725a6f9ee90e9e3fc77013506cd

Headers

File Characteristics

Imports

hid

setupapi

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 51KB

.rsrc Size: 4KB - Virtual size: 576B

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 88KB - Virtual size: 88KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 51KB

.rsrc
Size: 4KB - Virtual size: 576B

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 88KB - Virtual size: 88KB