ae2426f6488a3e40dbda474f326ed4009ab7ae263d7bec45155ace5029e711bf

Sharing

Copy URL Twitter E-mail

General

Target

ae2426f6488a3e40dbda474f326ed4009ab7ae263d7bec45155ace5029e711bf
Size

84KB
MD5

a43de1e4579cdf527ddfe183b0dfdd2a
SHA1

dd7b49f22204c557f3652b7349c12dae35c39a68
SHA256

ae2426f6488a3e40dbda474f326ed4009ab7ae263d7bec45155ace5029e711bf
SHA512

ffbb289bfb7ed7d245bb842930e911cd1e68330776daf01e3b73c2bc2176252269026f801697dc5096407678fbdfe783e7b8f204b379a57dfcf5971a7e4d2953
SSDEEP

1536:+Vf9gRGV1gxxEJDyiG5KWD9hcuqWVF6kCzRKq0Xs:+Vf9gRGV1gxS5yiG5KWD9hDqWPZCtKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae2426f6488a3e40dbda474f326ed4009ab7ae263d7bec45155ace5029e711bf

Files

ae2426f6488a3e40dbda474f326ed4009ab7ae263d7bec45155ace5029e711bf
.dll windows x86

2e8786aa63ae0300d62d43e0046cc867

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW

rthidlib

?Open@CHidDevice@@QAEHGGH@Z
??1CHidDevice@@QAE@XZ
?SetOutputReport@CHidDevice@@QAEHPAXK@Z
??0CHidDevice@@QAE@XZ
??0CHidDeviceEnumerator@@QAE@GG@Z
??1CHidDeviceEnumerator@@QAE@XZ
?GetInfoArray@CHidDeviceEnumerator@@QAEAAV?$CArray@VCHidDeviceInfo@@ABV1@@@XZ
?GetInputReport@CHidDevice@@QAEHPAXK@Z

mfc110u

ord323
ord1045
ord2331
ord8230
ord12697
ord8169
ord5233
ord2432
ord12374
ord12375
ord14409
ord7770
ord14415
ord9248
ord4093
ord4031
ord12779
ord7789
ord1985
ord11820
ord11821
ord14287
ord12364
ord7847
ord14487
ord6218
ord14489
ord6220
ord14488
ord6219
ord3794
ord5789
ord12077
ord12085
ord4528
ord8062
ord10278
ord12089
ord12057
ord12760
ord5128
ord5425
ord5635
ord9200
ord5401
ord5638
ord5131
ord5287
ord5109
ord7572
ord12182
ord7563
ord5285
ord2324
ord14424
ord8064
ord10095
ord9059
ord6723
ord7844
ord1463
ord989
ord7505
ord1502
ord2935
ord2941
ord4602
ord8609
ord8204
ord6617
ord1514
ord266
ord4754
ord265
ord1516
ord286
ord1039
ord296
ord1504
ord3181
ord4795
ord12239
ord14477
ord306
ord1040
ord1521
ord3791
ord1505
ord324
ord1046
ord2311
ord2194
ord2354
ord2357
ord2322
ord2356
ord484
ord2216
ord2320
ord2134
ord2248
ord2345
ord2329
ord7573
ord8314

msvcr110

memcpy
strcpy_s
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__CxxFrameHandler3
memcpy_s
memmove
ldiv
memset
_purecall

kernel32

FindResourceW
SizeofResource
LoadResource
GetUserDefaultLangID
GetModuleHandleExW
MultiByteToWideChar
CloseHandle
WideCharToMultiByte
CreateMutexW
WaitForSingleObject
ReleaseMutex
LocalAlloc
LocalFree
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LockResource

msvcp110

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

Exports

Exports

??0IRTBridgeBoard@@QAE@ABV0@@Z
??0IRTBridgeBoard@@QAE@XZ
??1IRTBridgeBoard@@UAE@XZ
??4IRTBridgeBoard@@QAEAAV0@ABV0@@Z
??_7IRTBridgeBoard@@6B@
ConnectBridgeBoard
DisconnectBridgeBoard
GetBoardCount
GetBridgeInfo
GetBridgeboardDllVer
ReleaseBridgeInfo

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e8786aa63ae0300d62d43e0046cc867

Headers

DLL Characteristics

File Characteristics

Imports

version

rthidlib

mfc110u

msvcr110

kernel32

msvcp110

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 57KB - Virtual size: 56KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB