8472461f4c69f1d866bfad231c07bfdfe8d9295a9f0ad8452ca9c86b9ab3784a

Sharing

Copy URL Twitter E-mail

General

Target

8472461f4c69f1d866bfad231c07bfdfe8d9295a9f0ad8452ca9c86b9ab3784a
Size

85KB
MD5

508a5c4a232fcbc1d93c837e7b2a28f5
SHA1

e0f7d15aaa23d98642c029c143dd39e4aee0af54
SHA256

8472461f4c69f1d866bfad231c07bfdfe8d9295a9f0ad8452ca9c86b9ab3784a
SHA512

38e172a80bf25e4c0cbc2a9892cc9dfd1145a0b1400ce74e11e9ca9a204a037cb832924f88c0ce69a057ba9e513d79aa1de93f49005b635bcdfd3735290dbcaf
SSDEEP

1536:s8izlGqbVQuR/3gx/sPk3Zsg3kjR7kttyHSE9q:s5h4mKstRojE9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8472461f4c69f1d866bfad231c07bfdfe8d9295a9f0ad8452ca9c86b9ab3784a

Files

8472461f4c69f1d866bfad231c07bfdfe8d9295a9f0ad8452ca9c86b9ab3784a
.dll windows:5 windows x86

a7cbf751d7ff516abb9a40633c7786b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

kernel32

GetModuleFileNameW
GetProcessHeap
WriteConsoleW
HeapSize
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LoadLibraryW
GetProcAddress
CloseHandle
CreateFileW
FreeLibrary
ReadFile
GetCommState
SetCommState
CreateFileA
GetFileType
SetupComm
PurgeComm
GetCommTimeouts
SetCommTimeouts
SetCommMask
ClearCommError
ResetEvent
WriteFile
CreateEventW
WaitForSingleObjectEx
CancelIo
GetOverlappedResult
HeapReAlloc
FlushFileBuffers
SetStdHandle
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
GetStdHandle
EncodePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetStartupInfoW
DeleteCriticalSection
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode

Exports

Exports

DES_Dc
DES_Dcm
DES_Ec
DES_Ky
ICC_Reader_Application
ICC_Reader_CancelPinInput
ICC_Reader_Close
ICC_Reader_DirectComm2PinPad
ICC_Reader_DirectCommand
ICC_Reader_GetCurrBaud
ICC_Reader_GetDevID
ICC_Reader_GetDevName
ICC_Reader_GetStatus
ICC_Reader_GetTermID
ICC_Reader_IsPinPadExist
ICC_Reader_Libinfo
ICC_Reader_Open
ICC_Reader_Open4428
ICC_Reader_Open4442
ICC_Reader_PowerOff
ICC_Reader_PowerOn
ICC_Reader_PutTermID
ICC_Reader_ReOpen
ICC_Reader_ReadPin
ICC_Reader_SetRateHigh
ICC_Reader_SetRateNormal
ICC_Reader_StatusCode
ICC_Reader_Type

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7cbf751d7ff516abb9a40633c7786b2

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 14KB - Virtual size: 22KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 14KB - Virtual size: 22KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB