c3222b362e3084c2e0987db43e75c976722fbcc2ed45db04149f65229528c628

Sharing

Copy URL Twitter E-mail

General

Target

c3222b362e3084c2e0987db43e75c976722fbcc2ed45db04149f65229528c628
Size

43KB
MD5

12c71c64f8cf6f568c7be1aeab774ee6
SHA1

d0185951c998e06420fa0f3d4f05113b8515ce3c
SHA256

c3222b362e3084c2e0987db43e75c976722fbcc2ed45db04149f65229528c628
SHA512

e490311090cee9ac06c51d2e17f9478f7a6f32152fcf45853066d20bdce5c537d6c95a57e510a82e5433e97588471effde10bcbb58a62e17f1e7be6e9ce147ed
SSDEEP

768:br6YyOMv6bpF5rHwQpdDIogrGuMm0ydZPsOtEGl4XwVeTW:/80tfkQpdDIFx0yLsOtneTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3222b362e3084c2e0987db43e75c976722fbcc2ed45db04149f65229528c628

Files

c3222b362e3084c2e0987db43e75c976722fbcc2ed45db04149f65229528c628
.dll windows x86

7f901f5e6e9f167d0c3f0f6844ee3e32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc90u

ord935
ord938
ord936
ord2081
ord4519
ord1607
ord285
ord3220
ord1565
ord290
ord5793
ord6084
ord5776
ord5543
ord781
ord579
ord2676
ord665
ord406
ord1552
ord6813
ord663
ord403
ord909
ord265
ord2537
ord296
ord6630
ord286
ord266
ord3185
ord811
ord600
ord280
ord2490
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088
ord801

msvcr90

_initterm_e
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
memcpy
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_time64
wcsftime
_localtime64_s
swscanf_s
__CxxFrameHandler3
??2@YAPAXI@Z
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
FindFirstFileW
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
WideCharToMultiByte
GetLocalTime
GetTickCount
FindClose

Exports

Exports

??0CDataFileLoad@@QAE@XZ
??0CDataFileSave@@QAE@ABV0@@Z
??0CDataFileSave@@QAE@XZ
??1CDataFileLoad@@UAE@XZ
??1CDataFileSave@@UAE@XZ
??4CDataFileSave@@QAEAAV0@ABV0@@Z
??_7CDataFileLoad@@6B@
??_7CDataFileSave@@6B@
?GetAvgCount@CDataFileLoad@@QAEHXZ
?GetDataType@CDataFileLoad@@QAEXAAH0@Z
?GetDeviceName@CDataFileLoad@@QAEAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetIntegralTimeMus@CDataFileLoad@@QAEHXZ
?GetOtherInfo@CDataFileLoad@@QAEAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetPixelCount@CDataFileLoad@@QAEHXZ
?GetReverse0@CDataFileLoad@@QAEHXZ
?GetSavingTime@CDataFileLoad@@QAEAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetSerialNumber@CDataFileLoad@@QAEAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetSmoothness@CDataFileLoad@@QAEHXZ
?GetVersionInfo@CDataFileLoad@@QAEAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?LoadSeqData@CDataFileLoad@@QAEHPAN0@Z
?LoadSingleData@CDataFileLoad@@QAEHPAN0@Z
?ResetSerNum@CDataFileSave@@QAEHH@Z
?SaveSeqData@CDataFileSave@@QAEHJPAN0@Z
?SaveSeqData@CDataFileSave@@QAEHPAN0@Z
?SaveSingleData@CDataFileSave@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAN1@Z
?SetDataOnly@CDataFileSave@@QAEX_N@Z
?SetDataType@CDataFileSave@@QAEHHH@Z
?SetDecimalCount@CDataFileSave@@QAEHHH@Z
?SetDeviceInfo@CDataFileSave@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@00@Z
?SetIOType@CDataFileSave@@QAEHH@Z
?SetLoadingSeqDataFileDir@CDataFileLoad@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetLoadingSingleDataFilePath@CDataFileLoad@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetOtherInfo@CDataFileSave@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetPixelCount@CDataFileSave@@AAEXXZ
?SetPixelCount@CDataFileSave@@QAEHH@Z
?SetReverse0@CDataFileSave@@QAEXH@Z
?SetSavingByIntervalCount@CDataFileSave@@QAEHH@Z
?SetSavingByIntervalTime@CDataFileSave@@QAEHH@Z
?SetSavingEveryFrame@CDataFileSave@@QAEHXZ
?SetSavingSeqDataFileNameIncludeTime@CDataFileSave@@QAEH_N0@Z
?SetSavingSeqDataFileNameInfo@CDataFileSave@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0H@Z
?SetSpectrumInfo@CDataFileSave@@QAEHHHH@Z
?SetUsingLanguage@CDataFileSave@@QAEHH@Z

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f901f5e6e9f167d0c3f0f6844ee3e32

Headers

DLL Characteristics

File Characteristics

Imports

mfc90u

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB