35bc228bd5ad2b9fd437d20e1230cb46

Sharing

Copy URL Twitter E-mail

General

Target

35bc228bd5ad2b9fd437d20e1230cb46
Size

709KB
MD5

35bc228bd5ad2b9fd437d20e1230cb46
SHA1

85861d79c4f2b5b22f81a3236502ff5e5cde3d77
SHA256

817a66c98f59861f7a7dc1e99ac7371d9cfffc5f78af18cb0830fb0eefd23d2c
SHA512

230456c1e6dd434e1a043117942c39ce97007e4ea2ca6e67493a09a652d7dcddb2c53bdf1ddf23028cb8989dc208aff00ca89ed7671831bcbf444ef958a870f5
SSDEEP

12288:ZToDVya5DqaSocXAVEWaDpYuBjE5b2wpZCZFcGTxoUTagxmkSE:aDVya5D/SocQ1aDpYuBjE5acGcUKUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35bc228bd5ad2b9fd437d20e1230cb46

Files

35bc228bd5ad2b9fd437d20e1230cb46
.dll windows:5 windows x86 arch:x86

dbccdda11d5a892cc42a37672ccc5df0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenEventA
SetEnvironmentVariableA
GetProcAddress
GetProcessHeap
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
CreateFileA
SetStdHandle
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
HeapReAlloc
HeapSize
HeapAlloc
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
SetHandleCount
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetSystemInfo
VirtualAlloc
GetModuleFileNameA
IsBadReadPtr
HeapValidate
GetCommandLineA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
CompareStringA
GetCurrentThread
GlobalFlags
SetEndOfFile
FlushFileBuffers
ReadFile
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
lstrcmpW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
lstrcmpA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetCurrentProcessId
CompareStringW
GetAtomNameW
GlobalGetAtomNameW
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEvent
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
SetFilePointer
WriteFile
DeviceIoControl
FormatMessageW
LocalFree
GetLogicalDrives
LoadResource
LockResource
SizeofResource
FindResourceW
CreateFileW
WaitForSingleObject
CloseHandle
CreateThread
IsBadCodePtr
Sleep
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetModuleFileNameW
lstrlenW
FreeLibrary
GetVersion
GetModuleHandleW
LoadLibraryW
GetLastError
GetStringTypeA

user32

ShowWindow
GetMenuCheckMarkDimensions
SetWindowTextW
SystemParametersInfoW
DestroyMenu
GetForegroundWindow
SetForegroundWindow
GetDesktopWindow
GetActiveWindow
ShowOwnedPopups
IsWindowVisible
InvalidateRect
UpdateWindow
BringWindowToTop
GetWindowDC
ClientToScreen
ValidateRect
RegisterWindowMessageW
GetClassInfoExW
GetClassInfoW
GetClientRect
MapWindowPoints
DispatchMessageW
GetFocus
SetActiveWindow
SetRectEmpty
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
GetWindow
GetCapture
WinHelpW
TrackPopupMenu
GetDlgItem
GetKeyState
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowTextW
UnhookWindowsHookEx
MessageBoxW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
PostMessageW
SendMessageW
IsWindow
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
LoadMenuW
SetMenuItemBitmaps
ModifyMenuW
InsertMenuItemW
RegisterDeviceNotificationW
CreateWindowExW
RegisterClassW
LoadCursorW
GetMenuItemInfoW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetCursor
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
ReuseDDElParam
UnpackDDElParam
LoadIconW
DefWindowProcW
UnregisterClassW
DestroyWindow
UnregisterDeviceNotification
GetClipboardFormatNameA
GetClipboardFormatNameW
PtInRect
InflateRect
SetFocus
GetMenuItemID
GetMenuState
GetSubMenu
GetMenuItemCount
FillRect
LoadBitmapW
GetSysColorBrush
PeekMessageW
PostQuitMessage
IsMenu

gdi32

PtVisible
GetObjectW
GetDeviceCaps
CreateSolidBrush
GetStockObject
CreatePatternBrush
CreateFontIndirectW
CreateBitmap
CreateCompatibleBitmap
RectVisible
BitBlt
GetPixel
TextOutW
ExtTextOutW
GetTextExtentPoint32W
Escape
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
SelectObject
GetObjectType
CreateCompatibleDC

advapi32

OpenThreadToken
SetThreadToken
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

StrStrIA

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

shell32

DragFinish
DragQueryFileW

ole32

StringFromCLSID
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

nfuCheckFileCRC
nfuCheckParameterTableCRC
nfuCreateDeviceManage
nfuDestoryDeviceManage
nfuDownloadFactory
nfuDownloadFirmware
nfuDownloadFullImage
nfuEnumDevice
nfuGetDeviceInfo
nfuGetDeviceState
nfuReadBuffer
nfuResetDevice
nfuStopDownload
nfuStopUpload
nfuUploadFirmware
nfuUploadFullImage
nfuWriteBuffer

Sections

.text
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbccdda11d5a892cc42a37672ccc5df0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

setupapi

oleacc

winspool.drv

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 507KB - Virtual size: 507KB

.rdata Size: 124KB - Virtual size: 124KB

.data Size: 9KB - Virtual size: 25KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 65KB - Virtual size: 65KB

.text
Size: 507KB - Virtual size: 507KB

.rdata
Size: 124KB - Virtual size: 124KB

.data
Size: 9KB - Virtual size: 25KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 65KB - Virtual size: 65KB