7898557f558e37c8eb4c3bc7bf65822716e1501f2bb432b1a125a8f5ccc1d39f

Sharing

Copy URL

Twitter E-mail

General

Target

7898557f558e37c8eb4c3bc7bf65822716e1501f2bb432b1a125a8f5ccc1d39f
Size

85KB
MD5

eb9a4ea7a6fdae89296094e541ab8d72
SHA1

3889f5b2b67d788f2b305f525a2969b72a8a794e
SHA256

7898557f558e37c8eb4c3bc7bf65822716e1501f2bb432b1a125a8f5ccc1d39f
SHA512

5114193d6f6c0c39de0922cf8d4f08c09dab72c782afceebc6f1fa66dff7e12d58df2ed138587d114d82d61e017020e3f9328c89ba279c96db86b229bb901824
SSDEEP

1536:dVJRYkbq7LciPejzISBTb6gDIOkjj4OqZBKSh+ek3GJ:dVJRYkbq7LcsmMSBX6gDIOkjUOq3jh+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7898557f558e37c8eb4c3bc7bf65822716e1501f2bb432b1a125a8f5ccc1d39f

Files

7898557f558e37c8eb4c3bc7bf65822716e1501f2bb432b1a125a8f5ccc1d39f
.dll windows:5 windows x86

3e50353e87abdb4bc57a0abd0bab953d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW

rthidlib

?Open@CHidDevice@@QAEHGGH@Z
??1CHidDevice@@QAE@XZ
?SetOutputReport@CHidDevice@@QAEHPAXK@Z
??0CHidDevice@@QAE@XZ
??0CHidDeviceEnumerator@@QAE@GG@Z
??1CHidDeviceEnumerator@@QAE@XZ
?GetInfoArray@CHidDeviceEnumerator@@QAEAAV?$CArray@VCHidDeviceInfo@@ABV1@@@XZ
?GetInputReport@CHidDevice@@QAEHPAXK@Z

mfc110u

ord2331
ord2329
ord8314
ord8230
ord12697
ord8169
ord5233
ord2432
ord12374
ord12375
ord14409
ord7770
ord14415
ord9248
ord4093
ord4031
ord12779
ord7789
ord1985
ord11820
ord11821
ord14287
ord12364
ord7847
ord14487
ord6218
ord14489
ord6220
ord14488
ord6219
ord3794
ord5789
ord12077
ord12085
ord4528
ord8062
ord10278
ord12089
ord12057
ord12760
ord5128
ord5425
ord5635
ord9200
ord5401
ord5638
ord5131
ord5287
ord5109
ord1045
ord7573
ord7563
ord323
ord12182
ord5285
ord8064
ord10095
ord9059
ord6723
ord7844
ord1463
ord989
ord7505
ord1502
ord2941
ord4602
ord8609
ord8204
ord6617
ord1514
ord266
ord4754
ord265
ord1516
ord286
ord1039
ord296
ord1504
ord2324
ord14424
ord3181
ord4795
ord12239
ord14477
ord306
ord3791
ord1505
ord324
ord1046
ord2311
ord2194
ord2354
ord2357
ord2322
ord2356
ord484
ord2216
ord2320
ord2134
ord2248
ord2345
ord1040
ord7572
ord1521

msvcr110

memcpy
strcpy_s
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__CxxFrameHandler3
memcpy_s
memmove
memset
ldiv
_purecall

kernel32

FindResourceW
SizeofResource
LoadResource
GetUserDefaultLangID
GetModuleHandleExW
MultiByteToWideChar
CloseHandle
WideCharToMultiByte
CreateMutexW
WaitForSingleObject
ReleaseMutex
Sleep
LocalAlloc
LocalFree
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LockResource

msvcp110

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

Exports

Exports

??0IRTBridgeBoard@@QAE@ABV0@@Z
??0IRTBridgeBoard@@QAE@XZ
??1IRTBridgeBoard@@UAE@XZ
??4IRTBridgeBoard@@QAEAAV0@ABV0@@Z
??_7IRTBridgeBoard@@6B@
ConnectBridgeBoard
DisconnectBridgeBoard
GetBoardCount
GetBridgeInfo
GetBridgeboardDllVer
ReleaseBridgeInfo

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e50353e87abdb4bc57a0abd0bab953d

Headers

DLL Characteristics

File Characteristics

Imports

version

rthidlib

mfc110u

msvcr110

kernel32

msvcp110

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB