167b36950e1e7eaafb412d7cb99cb68155a94b01c7e3d2a88d46d75c7ffbca68

Sharing

Copy URL Twitter E-mail

General

Target

167b36950e1e7eaafb412d7cb99cb68155a94b01c7e3d2a88d46d75c7ffbca68
Size

252KB
MD5

ae5504ccabca0b95664a9a0eedff01a3
SHA1

570b83d55fa865918979de969ada4f6a87d4345a
SHA256

167b36950e1e7eaafb412d7cb99cb68155a94b01c7e3d2a88d46d75c7ffbca68
SHA512

35b5664f08c32d45c8fb04c3573fbbd27bf33e50419da86128735faaa1aa4bd47bae65d48d03f7238e5b07be38162ff32c7be010cb9b2a96f8db14262e4acc64
SSDEEP

3072:KjLc7CD57l8fnD2X3onWnYqTzPRQ1/6evbgj29F0xZab+MEn:WL9hAyXNn/uSeT79Fmn

Score

N/A

Malware Config

Signatures

Files

167b36950e1e7eaafb412d7cb99cb68155a94b01c7e3d2a88d46d75c7ffbca68
.dll windows x86

5bd772cdc6b9adc14b1bb60775798282

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

usb20dll

_IF_CloseDev
_IF_OpenDevEx
_IF_GetLetter
_IF_IsCdrom
_IF_IIR_Manage

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
DeleteFileA
CloseHandle
ReadFile
SetFilePointer
WriteFile
CreateFileA
LocalFree
MapViewOfFile
UnmapViewOfFile
OutputDebugStringA
CreateThread
TerminateThread
GetExitCodeThread
DeviceIoControl
GetVersionExA
FreeResource
FlushFileBuffers
LockResource
LoadResource
SizeofResource
FindResourceA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
SearchPathA
Sleep
WaitForSingleObject
ResetEvent
CreateEventA
MultiByteToWideChar
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException
GetLogicalDriveStringsA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr

user32

PostMessageA
CharUpperA

advapi32

SetEntriesInAclA
GetSecurityInfo
SetSecurityInfo
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

shell32

SHChangeNotify

ole32

CoCreateGuid

Exports

Exports

ByteToTable
ChangeDiskPos
CharToByte
CheckPassword
CheckSum
CloseDeviceHandle
DeviceInquiry
DiskExit
DiskInit
EraseAllFlash
EraseFlash
EraseLog
ExpandFileRes
GetBit
GetDeviceHandle
GetDeviceInfo
GetDeviceList
GetDiskPos
GetDiskStatus
GetFirmwareVer
GetFlashNum
GetHideSize
GetModeSense
GetProtect
GetSenseKey
GetUsbCharPair
GetUserIndex
GetUserInfo
GetWriteProtectState
HideProcessAtAll
Inform
LockIIR
MasterKeySet
NoAdminSendCMD
OD_DeviceIO
OD_SCAN
OD_StopScan
ReadBlock
ReadDisk
ReadHideDisk
ReadIIR
ReadIIR1
ReadLogicCapacoty
ReadSN
ReadSpareArea
RefreshFileBrowser
ReverseDWORD
SaveUserInfo
SectorDecrypt
SectorEncrypt
SetBit
SetLogWriteProtect
SetProtectStatus
TestUnitrdy
TurnBit
UpChar
UpDataAcessNote
VerifyPassWord
WORDReverse
WriteBlock
WriteBlockCheck
WriteDisk
WriteDiskCheck
WriteHideDisk
WriteIIR
WriteIIR1
WriteSpareArea
hi_GetUSB20Mode
hi_changepwd
hi_checkBlock
hi_checkLog
hi_checkapp
hi_checkpwd
hi_clearlog
hi_closedev
hi_formatdev
hi_getAGTLabelInUDisk
hi_getL1
hi_getL2
hi_getSecuInfo
hi_getSecuInfo20
hi_getSecuInfoCount
hi_getSerial20
hi_getUSB20Reserved
hi_getUSB20Reserved3
hi_getdevid
hi_getdevinfo
hi_getlogendadd
hi_getlogstartadd
hi_getmode
hi_getpatts
hi_getpwdinfo
hi_getserial
hi_gettempmode
hi_opendev
hi_partition
hi_readBlock
hi_readLog
hi_readcapacity
hi_readpages
hi_setL1
hi_setL2
hi_setSDSize
hi_setSecuInfo
hi_setUSB20Reserved
hi_setUSB20Reserved3
hi_setdisktimeout
hi_setmode
hi_setprotect
hi_setpwd
hi_setpwdinfo
hi_setserial
hi_settempmode
hi_setuserinfo
hi_writeBlock
hi_writeLog
hi_writepages
sha_char

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bd772cdc6b9adc14b1bb60775798282

Headers

File Characteristics

Imports

usb20dll

kernel32

user32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 116KB - Virtual size: 115KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 116KB - Virtual size: 115KB

.reloc
Size: 8KB - Virtual size: 5KB