d32255784236cc808ebad0f41bbae2d1cae7eb65f5c791dba783c56376b12a2d

Sharing

Copy URL

Twitter E-mail

General

Target

d32255784236cc808ebad0f41bbae2d1cae7eb65f5c791dba783c56376b12a2d
Size

252KB
MD5

316e46f32637839df88c3fb071b785cd
SHA1

6620478a73544e8b48b08421c680e3ec95f8fbf0
SHA256

d32255784236cc808ebad0f41bbae2d1cae7eb65f5c791dba783c56376b12a2d
SHA512

22c6a56c7bc45c344e69054f7c7c67b0dc5abd3eb52241a108b8e1cb4135191cdc7f41baeea15281d9d2e3199e3f53e61d19656fdc1b89ee8f87e5aee0969215
SSDEEP

3072:KjL/7CD57l8fnD2X3onWnYqTzPRQ1/6evbgj29C0xZab+MEn:WO9hAyXNn/uSeT79Cmn

Score

1^/10

Malware Config

Signatures

Files

d32255784236cc808ebad0f41bbae2d1cae7eb65f5c791dba783c56376b12a2d
.dll windows x86

5bd772cdc6b9adc14b1bb60775798282

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

usb20dll

_IF_CloseDev
_IF_OpenDevEx
_IF_GetLetter
_IF_IsCdrom
_IF_IIR_Manage

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
DeleteFileA
CloseHandle
ReadFile
SetFilePointer
WriteFile
CreateFileA
LocalFree
MapViewOfFile
UnmapViewOfFile
OutputDebugStringA
CreateThread
TerminateThread
GetExitCodeThread
DeviceIoControl
GetVersionExA
FreeResource
FlushFileBuffers
LockResource
LoadResource
SizeofResource
FindResourceA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
SearchPathA
Sleep
WaitForSingleObject
ResetEvent
CreateEventA
MultiByteToWideChar
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException
GetLogicalDriveStringsA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr

user32

PostMessageA
CharUpperA

advapi32

SetEntriesInAclA
GetSecurityInfo
SetSecurityInfo
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

shell32

SHChangeNotify

ole32

CoCreateGuid

Exports

Exports

ByteToTable
ChangeDiskPos
CharToByte
CheckPassword
CheckSum
CloseDeviceHandle
DeviceInquiry
DiskExit
DiskInit
EraseAllFlash
EraseFlash
EraseLog
ExpandFileRes
GetBit
GetDeviceHandle
GetDeviceInfo
GetDeviceList
GetDiskPos
GetDiskStatus
GetFirmwareVer
GetFlashNum
GetHideSize
GetModeSense
GetProtect
GetSenseKey
GetUsbCharPair
GetUserIndex
GetUserInfo
GetWriteProtectState
HideProcessAtAll
Inform
LockIIR
MasterKeySet
NoAdminSendCMD
OD_DeviceIO
OD_SCAN
OD_StopScan
ReadBlock
ReadDisk
ReadHideDisk
ReadIIR
ReadIIR1
ReadLogicCapacoty
ReadSN
ReadSpareArea
RefreshFileBrowser
ReverseDWORD
SaveUserInfo
SectorDecrypt
SectorEncrypt
SetBit
SetLogWriteProtect
SetProtectStatus
TestUnitrdy
TurnBit
UpChar
UpDataAcessNote
VerifyPassWord
WORDReverse
WriteBlock
WriteBlockCheck
WriteDisk
WriteDiskCheck
WriteHideDisk
WriteIIR
WriteIIR1
WriteSpareArea
hi_GetUSB20Mode
hi_changepwd
hi_checkBlock
hi_checkLog
hi_checkapp
hi_checkpwd
hi_clearlog
hi_closedev
hi_formatdev
hi_getAGTLabelInUDisk
hi_getL1
hi_getL2
hi_getSecuInfo
hi_getSecuInfo20
hi_getSecuInfoCount
hi_getSerial20
hi_getUSB20Reserved
hi_getUSB20Reserved3
hi_getdevid
hi_getdevinfo
hi_getlogendadd
hi_getlogstartadd
hi_getmode
hi_getpatts
hi_getpwdinfo
hi_getserial
hi_gettempmode
hi_opendev
hi_partition
hi_readBlock
hi_readLog
hi_readcapacity
hi_readpages
hi_setL1
hi_setL2
hi_setSDSize
hi_setSecuInfo
hi_setUSB20Reserved
hi_setUSB20Reserved3
hi_setdisktimeout
hi_setmode
hi_setprotect
hi_setpwd
hi_setpwdinfo
hi_setserial
hi_settempmode
hi_setuserinfo
hi_writeBlock
hi_writeLog
hi_writepages
sha_char

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bd772cdc6b9adc14b1bb60775798282

Headers

File Characteristics

Imports

usb20dll

kernel32

user32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 116KB - Virtual size: 115KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 116KB - Virtual size: 115KB

.reloc
Size: 8KB - Virtual size: 5KB