b8259d0e75900b69570c65759636044336cbeb0a1103d4a7bbec1555950dc3b6

Sharing

Copy URL Twitter E-mail

General

Target

b8259d0e75900b69570c65759636044336cbeb0a1103d4a7bbec1555950dc3b6
Size

52KB
MD5

e645f2000a0ec5847b6b25aec7b359d8
SHA1

b372ee151c3ed5114947ecd83796a5c00c58e7c8
SHA256

b8259d0e75900b69570c65759636044336cbeb0a1103d4a7bbec1555950dc3b6
SHA512

2b568067c4227118a43298904328260a5bddb5999226bba3bf4a19a41e7b4df422273d7da88a0f9efef247ff17e3197f7bbb8e4e7ba84d9892f67a1f2f344a14
SSDEEP

768:ZnYFWY8P2NKT+RAAt2oUTU4+A8tQO1ahqIahv4tv9VdPCCE:ZnYH8P2NKSRAw2kxAavnv4xA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8259d0e75900b69570c65759636044336cbeb0a1103d4a7bbec1555950dc3b6

Files

b8259d0e75900b69570c65759636044336cbeb0a1103d4a7bbec1555950dc3b6
.exe windows x86

ca333b5e6b60a7069f7671daef142b74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetPrivateProfileStringA
ReleaseMutex
CreateMutexA
GetPrivateProfileIntA
GetTickCount
Sleep
WaitForSingleObject
CreateThread
DeleteFileA
GetModuleFileNameA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

exit
strncmp
__CxxFrameHandler
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
_onexit
__set_app_type
_controlfp
_except_handler3
__p___initenv
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__dllonexit

ws2_32

setsockopt
closesocket
WSAGetLastError
send
recv
listen
bind
htons
WSACleanup
socket
WSAStartup
accept

mfc42

ord5442
ord5583
ord922
ord356
ord2770
ord2781
ord3181
ord1980
ord668
ord2818
ord800
ord540
ord537
ord2915
ord858
ord4277
ord939
ord924
ord4278
ord2764
ord4129
ord5683
ord665
ord1979
ord3318
ord5186
ord354
ord5710
ord535
ord711
ord413
ord6385

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

cwcrmcrm20dev

?OpenConnection@CCrmDriverDev@@QAEKXZ
?CloseConnection@CCrmDriverDev@@QAEKXZ
?GetFirmwareVersion@CCrmDriverDev@@QAEKQAU_cw_crm_firmware_version@@@Z
?SetInitInfo@CCrmDriverDev@@QAEKPAU_cw_crm_initialinfo@@@Z
?GetErrorDetailInfo@CCrmDriverDev@@QAEHKPAU_cw_crm_error_info@@@Z
?Reset@CCrmDriverDev@@QAEKW4_cw_enum_reset_type@@H@Z
?CloseShutter@CCrmDriverDev@@QAEKXZ
?OpenShutter@CCrmDriverDev@@QAEKXZ
?Retract@CCrmDriverDev@@QAEKKQAU_cw_crm_result@@@Z
??1CCrmDriverDev@@UAE@XZ
??0CCrmDriverDev@@QAE@XZ
?GetInitInfo@CCrmDriverDev@@QAEKPAU_cw_crm_initialinfo@@@Z
?SetBlackInfo@CCrmDriverDev@@QAEKPAD@Z
?GetDevStatus@CCrmDriverDev@@QAEKHPAU_cw_crm_dev_status@@@Z
?CashInStart@CCrmDriverDev@@QAEKXZ
?DownLoadFirmware@CCrmDriverDev@@QAEKEPAEK@Z
?SetDevType@CCrmDriverDev@@QAEKW4_cw_enum_crm_type@@@Z
?Dispense@CCrmDriverDev@@QAEKQAGEQAU_cw_crm_result@@QAU_cw_dispense_result@@AAG@Z
?Reject@CCrmDriverDev@@QAEKQAU_cw_crm_result@@@Z
?CashInRollBack@CCrmDriverDev@@QAEKQAU_cw_crm_result@@@Z
?CashInEnd@CCrmDriverDev@@QAEKQAU_cw_crm_result@@@Z
?SetMaxCountAmount@CCrmDriverDev@@QAEKKK@Z
?CashIn@CCrmDriverDev@@QAEKQAU_cw_crm_result@@AAGEPAU_cw_crm_note_id@@@Z

shlwapi

PathFileExistsA

imagehlp

MakeSureDirectoryPathExists

traceclient

TrcErrInit
TrcWritef

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca333b5e6b60a7069f7671daef142b74

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

ws2_32

mfc42

msvcp60

cwcrmcrm20dev

shlwapi

imagehlp

traceclient

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 160B

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 160B