ed2beae318a79a3810fd2574242b92ecd0640110b8baabcd74784fb0c903bcf2

Sharing

Copy URL

Twitter E-mail

General

Target

ed2beae318a79a3810fd2574242b92ecd0640110b8baabcd74784fb0c903bcf2
Size

696KB
MD5

17ff4a2a6f6cfbf40c581eeaa17154f5
SHA1

14c2a9299990270079e83a510326114347e3e5ab
SHA256

ed2beae318a79a3810fd2574242b92ecd0640110b8baabcd74784fb0c903bcf2
SHA512

9d972684ab29889532e895e63141ebe80309255373aa211488904636990cd3f961bf4db009e796378b5d7b2688c42f7360b83de327fd98adf94cf5bacd712f7e
SSDEEP

12288:q+K6onr7/Q2OuCh41y3lCuconZ7LTh8+BTkwZWbH0vj8/nfEYYvKQpNrqIQs+lx1:RK6onr7/Q2OuCh41mMwlDBTkH0vjCfEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed2beae318a79a3810fd2574242b92ecd0640110b8baabcd74784fb0c903bcf2

Files

ed2beae318a79a3810fd2574242b92ecd0640110b8baabcd74784fb0c903bcf2
.dll windows x86

69681c5894db578c9abc0a839679329b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2770
ord356
ord2820
ord3811
ord3337
ord5572
ord858
ord5465
ord801
ord2847
ord6143
ord6883
ord541
ord535
ord354
ord6407
ord6648
ord4129
ord1980
ord5583
ord6392
ord924
ord1168
ord1253
ord342
ord1182
ord1200
ord5186
ord5442
ord1979
ord665
ord4278
ord668
ord540
ord533
ord5194
ord5448
ord5778
ord3511
ord3318
ord1997
ord798
ord537
ord2818
ord2915
ord860
ord1105
ord800
ord803
ord543
ord3584
ord6394
ord5450
ord6383
ord5440
ord823
ord825
ord2808
ord3663

msvcrt

isalnum
memchr
_splitpath
_CIacos
atof
strncpy
atol
_mbscmp
fopen
fclose
ftell
fseek
fread
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
_purecall
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
strncmp
free
malloc
floor
ceil
memcpy
_ftol
__CxxFrameHandler
atoi
rand
srand
time
memset

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
ResetEvent
ResumeThread
Sleep
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
LocalFree
FormatMessageA
CreateSemaphoreA
SuspendThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetOverlappedResult
DeviceIoControl
CreateFileA
FreeLibrary
LoadLibraryA
GetProcAddress
DeleteCriticalSection

user32

MessageBoxA
UnregisterDeviceNotification
RegisterDeviceNotificationA

msvcp60

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

Exports

Exports

AdjustEnergy
ChangePensCommand
ChangePensCommand_3D
CloseGuideLight
CloseUSB_Board
DelayCommand
DisableLaserGalvoErr
DownloadMarkParameters
EnableCorrect
EndCommand
EndCommand_3D
GetAD
GetCSCInterfaceVersion
GetCorrectionData
GetEdgeEnergy
GetExternalStartStopSignal
GetFPGA_FirmwareVersion
GetJumpOptimizeDist
GetLaserAndScannerStatus
GetLaserGalvoErrSetting
GetMarkCounts
GetMarkStatus
GetMarkTime
GetOutputPortState
GetProducedData
GetScannerPosition
GetStepMotorHomeStatus
GetStepMotorLimitStatus
GetStepMotorPosition
GetStepMotorStatus
GetUSB_BoardCounts
GetUSB_FirmwareVersion
GetZBasePos
Goto_XY
Goto_XY_3D
InitAD
InputCommand
IsMarkEnd
IsReadDataEnd
JumpCommand
JumpCommandNoDelay
JumpCommand_3D
JumpCommand_Z
LaserSignalOff
LaserSignalOffset
LaserSignalOn
License
LoadFPGA_FirmwareProgram
MarkCommand_Bitmap
MarkCommand_Bitmap_3D
MarkCommand_Point
MarkCommand_Point_3D
MarkCommand_Vector
MarkCommand_Vector_3D
MoveStepMotorCommand_XY
MoveStepMotorCommand_Z
NullCommand
Offset_Z
OpenGuideLight
OpenUSB_Board
OutputCommand
ReadUSB_BoardSN
ReadUSB_BoardSN_ByIndex
Read_IO_Port
ReadyMark
ReadyPreview
ResetStartStopSignal
ResumeMarking
ReturnHome_R
ReturnHome_X
ReturnHome_Y
ReturnHome_Z
RotateStepMotorCommand_R
SPI_ModeSelect
SPI_SimmerCurrent
SPI_WaveForm
Set3DOffset
Set3DXYRatio
Set3DZParameters
SetCornerRatio
SetCorrectParameters_0
SetCorrectParameters_1
SetCorrectParameters_2
SetCorrectParameters_3
SetDelayPA_MO
SetDynamicAxisCorrect
SetDynamicAxisHomePos
SetEdgeEnergy
SetExternalStartSignalMode
SetFiberLaserEn
SetFirstMarkParameter
SetIPG_DibMode
SetInputSignalLevel
SetJumpOptimizeDist
SetLaserMode
SetMarkParameter
SetOptimizeParameters
SetOverallMarkCounts
SetPlaneCorrectMode
SetPolygonOptimize
SetPulseWidth
SetScannerIntervalsMode
SetScannerType
SetStepMotorHomeLimitValidSignalLevel
SetStepMotorLimitDirect
SetStepMotorParameters
SetSystemParameters
SetZBasePos
StartMark
StartReadDataThread
StartStepMotor_R
StartStepMotor_X
StartStepMotor_Y
StartStepMotor_Z
StepMotorZeroCounter
StopCalcData
StopMark
StopPreview
StopStepMotor_R
StopStepMotor_X
StopStepMotor_Y
StopStepMotor_Z
Super_MarkCommand_Vector
SuspendMarking
TestOffsetZ
TestVectorSpeed
WriteDataEnd
Write_IO_Port
Write_IO_Port_2
ZeroCounter

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69681c5894db578c9abc0a839679329b

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

msvcp60

setupapi

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 154KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 488KB - Virtual size: 487KB

.rsrc Size: 4KB - Virtual size: 856B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 156KB - Virtual size: 154KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 488KB - Virtual size: 487KB

.rsrc
Size: 4KB - Virtual size: 856B

.reloc
Size: 12KB - Virtual size: 8KB