2024-01-28_cc73bc64acd7e45ac9e88a5b4e55df48_ryuk

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-28_cc73bc64acd7e45ac9e88a5b4e55df48_ryuk
Size

14.3MB
MD5

cc73bc64acd7e45ac9e88a5b4e55df48
SHA1

490689b7923a3d39ac8226d57e0acb46297db203
SHA256

ce8ab7a0ab5ed3c22ad7b79831fd4ff995261805f3ed92351f73e84eaca61979
SHA512

b1fd98989febed612f950b6e9ec4418baeb58da8ccc0a1bfc6a470554b91705e74c9274161f27d2e1cccc75c2dbce1cf913b7cb7abf2d4959f2965c240bd6ab6
SSDEEP

49152:SF19j4pHbt0PmhSq86Itk5jSJu9gpCaJl3i/7HNpAqPUWoeXh+71WSb3N9wb+ZFZ:1ZSqv0Y/g1jgeFd0F3lFx+ZdbKEGu

Score

1^/10

Malware Config

Signatures

Files

2024-01-28_cc73bc64acd7e45ac9e88a5b4e55df48_ryuk
.exe windows:6 windows x64 arch:x64

743547703864597e12747ac81cd8b132

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:81:30:d1:04:ba:79:bf:b3:d3:5b:de:e0:6e:73:98
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12-01-2021 00:00

Not After

10-04-2024 23:59

Subject

CN=Micron Technology\, Inc.,OU=SSD Engineering,O=Micron Technology\, Inc.,L=Boise,ST=Idaho,C=US,1.2.840.113549.1.9.1=#0c15736d756469676f6e6461406d6963726f6e2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:4f:66:16:71:43:7e:ea:34:13:b5:d3:22:00:a4:03:3e:0d:dc:d9
Signer

Actual PE Digest

7c:4f:66:16:71:43:7e:ea:34:13:b5:d3:22:00:a4:03:3e:0d:dc:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\jenkins\workspace\StorageExecutive_HYD\StorageExecutive_Build_Release_Windows_HYD\storagedirector\bin\Windows\x64\Release-Static\msecli.pdb

Imports

ntdll

NtOpenFile
RtlUnwindEx
RtlPcToFileHeader
RtlVirtualUnwind
RtlLookupFunctionEntry
NtClose
RtlInitUnicodeString
RtlCaptureContext
VerSetConditionMask

kernel32

SetFilePointerEx
Sleep
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
LocalFree
DeviceIoControl
GetLastError
CreateFileA
WideCharToMultiByte
CloseHandle
CreateMutexA
WaitForSingleObject
ReleaseMutex
TerminateProcess
GetFullPathNameA
CreateProcessA
GetExitCodeProcess
TerminateThread
CreateThread
MoveFileA
FindFirstFileA
FindNextFileA
InitializeCriticalSectionEx
FindClose
HeapSize
CopyFileA
GetSystemDirectoryA
DeleteFileA
HeapReAlloc
RaiseException
DecodePointer
RemoveDirectoryA
DeleteCriticalSection
VerifyVersionInfoW
FreeLibrary
GetSystemWow64DirectoryA
SetFileTime
LocalFileTimeToFileTime
GetFileAttributesA
FileTimeToLocalFileTime
DosDateTimeToFileTime
GetFileTime
FileTimeToDosDateTime
ReadFile
VirtualFree
GetCurrentProcess
WriteFile
VirtualAlloc
GetDriveTypeA
FindFirstVolumeA
GetVolumeInformationA
OutputDebugStringA
SetLastError
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
LocalAlloc
LocalReAlloc
GetCurrentProcessId
GlobalSize
MulDiv
SetEvent
GetCurrentThreadId
SetThreadPriority
ResumeThread
GetModuleHandleA
GetModuleHandleW
CompareStringA
lstrcmpA
GlobalGetAtomNameA
FileTimeToSystemTime
EncodePointer
GetSystemDirectoryW
FreeResource
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
FindResourceA
GlobalAddAtomA
GlobalFindAtomA
FlushFileBuffers
GetFileSize
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
lstrcmpiA
GlobalFlags
CompareStringW
GetLocaleInfoW
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetFileAttributesExA
GetFileSizeEx
SetFileAttributesA
SystemTimeToTzSpecificLocalTime
GetACP
lstrcpyA
GetWindowsDirectoryA
VerifyVersionInfoA
GetTempPathA
GetTempFileNameA
GetTickCount
GetProfileIntA
SearchPathA
GetDiskFreeSpaceA
GetUserDefaultLCID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TlsAlloc
GetVolumeNameForVolumeMountPointA
QueryPerformanceFrequency
GetSystemInfo
GetLocalTime
SetVolumeLabelA
LCMapStringW
GetStringTypeW
OutputDebugStringW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryW
GetFullPathNameW
GetTempPathW
VirtualQuery
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
GetCommandLineA
GetCommandLineW
SetStdHandle
ExitProcess
IsValidLocale
EnumSystemLocalesW
DeleteFileW
GetConsoleCP
GetConsoleMode
CreateDirectoryW
ReadConsoleW
GetTimeZoneInformation
GetFileAttributesExW
SetFileAttributesW
FindFirstFileExA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
GetVolumePathNamesForVolumeNameA
GetVersionExA
FindNextVolumeA
FindVolumeClose
GetComputerNameExA
GetComputerNameA
GetModuleFileNameA
SizeofResource
GetStdHandle
CreateFileW
CreateEventW
WriteConsoleInputA
CreateSemaphoreA
CreateDirectoryA
FindResourceW
LoadResource
FindResourceExW
LockResource
MultiByteToWideChar
ReleaseSemaphore

user32

FillRect
DestroyMenu
GetMenuItemInfoA
InflateRect
SystemParametersInfoA
CopyImage
SetRectEmpty
OffsetRect
PostQuitMessage
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
IntersectRect
TrackMouseEvent
InvalidateRect
LoadImageW
ShowOwnedPopups
SetCursor
DeleteMenu
SetTimer
KillTimer
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
LoadImageA
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
LoadCursorW
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongPtrA
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
MonitorFromWindow
GetWindowDC
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthA
GetWindowTextA
LoadCursorA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
MessageBoxA
IsWindowEnabled
EnableWindow
SendMessageA
UnhookWindowsHookEx
wsprintfA
MapVirtualKeyA
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperA
IsDialogMessageA
DestroyIcon
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
WinHelpA
GetMonitorInfoA
GetDlgItem

advapi32

RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
AddAccessAllowedAce
GetLengthSid
CheckTokenMembership
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
InitializeAcl
RegOpenKeyExA

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleLockRunning
CoInitialize
CoInitializeEx
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator

oleaut32

VariantClear
VariantChangeType
SysAllocString
SysFreeString
VariantInit
SysAllocStringLen
SysAllocStringByteLen
VariantCopy
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate

setupapi

CM_Get_Child
CM_Get_Sibling
CM_Get_Device_ID_ExA
CM_Request_Device_EjectW
CM_Request_Device_EjectA
SetupDiGetDeviceInterfaceDetailA
CM_Get_DevNode_Status
SetupDiSetClassInstallParamsA
CM_Get_Device_IDA
SetupDiOpenDeviceInfoA
SetupDiGetDeviceInfoListDetailA
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetDevicePropertyW
CM_Locate_DevNodeA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Registry_PropertyA
SetupDiCallClassInstaller

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

bcrypt

BCryptCreateHash
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptGetProperty

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathRemoveExtensionA
PathFileExistsA
StrCmpW
StrFormatKBSizeA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipCreateBitmapFromStream
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdiplusStartup
GdipFree
GdipDrawImageI
GdipGetImagePaletteSize
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipGetImagePalette
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusShutdown
GdipAlloc
GdipDeleteGraphics

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

uxtheme

GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
DrawThemeBackground

rpcrt4

UuidFromStringA

gdi32

RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
PtVisible
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
CreateRectRgn
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CreatePatternBrush
CreatePen
CreateHatchBrush
GetTextFaceA
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCA
GetNearestPaletteIndex
CopyMetaFileA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteExA
SHGetFileInfoA

Exports

Exports

?Modify_Info_5013@@YAHH@Z
AsmUSBLib_Function_iGetDiskCapacity
AsmtUSBLib_A105X_AccessFirmwareEEPROM
AsmtUSBLib_A105X_AccessRegister
AsmtUSBLib_A105X_CPURST
AsmtUSBLib_A105X_CPURST_Phyadr
AsmtUSBLib_A105X_ControlGPIO
AsmtUSBLib_A105X_OEM_AccessEEPROM
AsmtUSBLib_A105X_OEM_ControlGPIO
AsmtUSBLib_A105X_OEM_GetUartRX
AsmtUSBLib_A105X_OEM_SetHDDPC
AsmtUSBLib_CloseDev
AsmtUSBLib_FactoryConfigure_Read
AsmtUSBLib_FactoryConfigure_Write
AsmtUSBLib_Function_BuildBinFile
AsmtUSBLib_Function_CPUSpeedRelink
AsmtUSBLib_Function_SafeRemoveUSB
AsmtUSBLib_Function_iCPURSTfromPhyAddrNumber
AsmtUSBLib_Function_iGetFWfromPhyAddrNumber
AsmtUSBLib_Function_iGetSNfromPhyAddrNumber
AsmtUSBLib_Function_iUpdateFWfromPhyAddrNumber
AsmtUSBLib_Function_iUpdateFWfromPhyAddrNumber2
AsmtUSBLib_Function_nObtainDiSKInfo
AsmtUSBLib_Function_vClosePD
AsmtUSBLib_Function_vCustomizedCheck
AsmtUSBLib_Function_vFWUpgPhyadr
AsmtUSBLib_Function_vGetOTBStatus
AsmtUSBLib_Function_vInitialPD
AsmtUSBLib_Function_vSampleFWBcdUpg
AsmtUSBLib_Function_vSampleFWUpg
AsmtUSBLib_Function_vScanUSBPort
AsmtUSBLib_Function_vSetDllDebugLevel
AsmtUSBLib_Function_vShowPDVersion
AsmtUSBLib_Function_vUpdateConfig
AsmtUSBLib_Function_vUpdateFirmware
AsmtUSBLib_Function_vUpdateFirmwareBcd
AsmtUSBLib_Function_vUpdatePDFirmware
AsmtUSBLib_GetSmartAttribute
AsmtUSBLib_IdentifyDevice
AsmtUSBLib_NVME_BridgeInformation
AsmtUSBLib_NVME_GetIdentify
AsmtUSBLib_NVME_GetLogPage
AsmtUSBLib_NVME_LEDControl
AsmtUSBLib_NVME_Reset
AsmtUSBLib_NVME_SecurityProtocolIn
AsmtUSBLib_NVME_SpeedMode
AsmtUSBLib_NVMePacket_DataInPhaseCmd
AsmtUSBLib_NVMePacket_DataOutPhaseCmd
AsmtUSBLib_NVMePacket_NonDataPhaseCmd
AsmtUSBLib_NVMePacket_PowerOFF
AsmtUSBLib_ReadSmartLog
AsmtUSBLib_ReadWritePerfomanceTest
AsmtUSBLib_SCSI2105_AccessHardDisk
AsmtUSBLib_SCSI236X_PCIeConfiguration_ReadDword
AsmtUSBLib_SCSI236X_PCIeConfiguration_WriteDword
AsmtUSBLib_USB_Get2364FixtureDev
AsmtUSBLib_USB_GetSpeed
AsmtUSBLib_USB_SetSpeedModeByVendor
AsmtUSBLib_VENDOR_CMD
AsmtUSBLib_WriteSmartLog
AsmtUSBLib_strCheckChipType
AsmtUSBLib_vDetectCCOrientation
AsmtUSBLib_vIsASM115X
AsmtUSBLib_vIsASMUSBDev
AsmtUSBLib_vPartitionFormat
AsmtUSBLib_vReadWriteSmartLogPage_LastSector
AsmtUSBLib_vReadWriteTest
AsmtUSBLib_vScanUSBPort
AsmtUSBLib_vSectorReadWriteTest
AsmtUSBLib_vShowUSBProtocol
AsmtUSBLib_vShowUSBStatus
cJSON_AddArrayToObject
cJSON_AddBoolToObject
cJSON_AddFalseToObject
cJSON_AddItemReferenceToArray
cJSON_AddItemReferenceToObject
cJSON_AddItemToArray
cJSON_AddItemToObject
cJSON_AddItemToObjectCS
cJSON_AddNullToObject
cJSON_AddNumberToObject
cJSON_AddObjectToObject
cJSON_AddRawToObject
cJSON_AddStringToObject
cJSON_AddTrueToObject
cJSON_Compare
cJSON_CreateArray
cJSON_CreateArrayReference
cJSON_CreateBool
cJSON_CreateDoubleArray
cJSON_CreateFalse
cJSON_CreateFloatArray
cJSON_CreateIntArray
cJSON_CreateNull
cJSON_CreateNumber
cJSON_CreateObject
cJSON_CreateObjectReference
cJSON_CreateRaw
cJSON_CreateString
cJSON_CreateStringArray
cJSON_CreateStringReference
cJSON_CreateTrue
cJSON_Delete
cJSON_DeleteItemFromArray
cJSON_DeleteItemFromObject
cJSON_DeleteItemFromObjectCaseSensitive
cJSON_DetachItemFromArray
cJSON_DetachItemFromObject
cJSON_DetachItemFromObjectCaseSensitive
cJSON_DetachItemViaPointer
cJSON_Duplicate
cJSON_GetArrayItem
cJSON_GetArraySize
cJSON_GetErrorPtr
cJSON_GetObjectItem
cJSON_GetObjectItemCaseSensitive
cJSON_GetStringValue
cJSON_HasObjectItem
cJSON_InitHooks
cJSON_InsertItemInArray
cJSON_IsArray
cJSON_IsBool
cJSON_IsFalse
cJSON_IsInvalid
cJSON_IsNull
cJSON_IsNumber
cJSON_IsObject
cJSON_IsRaw
cJSON_IsString
cJSON_IsTrue
cJSON_Minify
cJSON_Parse
cJSON_ParseWithOpts
cJSON_Print
cJSON_PrintBuffered
cJSON_PrintPreallocated
cJSON_PrintUnformatted
cJSON_ReplaceItemInArray
cJSON_ReplaceItemInObject
cJSON_ReplaceItemInObjectCaseSensitive
cJSON_ReplaceItemViaPointer
cJSON_SetNumberHelper
cJSON_Version
cJSON_free
cJSON_malloc

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1015KB - Virtual size: 1014KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9.9MB - Virtual size: 38.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

743547703864597e12747ac81cd8b132

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0f:81:30:d1:04:ba:79:bf:b3:d3:5b:de:e0:6e:73:98Certificate

Extended Key Usages

Key Usages

7c:4f:66:16:71:43:7e:ea:34:13:b5:d3:22:00:a4:03:3e:0d:dc:d9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

kernel32

user32

advapi32

ole32

oleaut32

setupapi

version

bcrypt

shlwapi

oleacc

gdiplus

msimg32

imm32

winmm

uxtheme

rpcrt4

gdi32

winspool.drv

shell32

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 1015KB - Virtual size: 1014KB

.data Size: 9.9MB - Virtual size: 38.4MB

.pdata Size: 121KB - Virtual size: 121KB

.gfids Size: 103KB - Virtual size: 103KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 59KB - Virtual size: 58KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0f:81:30:d1:04:ba:79:bf:b3:d3:5b:de:e0:6e:73:98
Certificate

7c:4f:66:16:71:43:7e:ea:34:13:b5:d3:22:00:a4:03:3e:0d:dc:d9
Signer

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 1015KB - Virtual size: 1014KB

.data
Size: 9.9MB - Virtual size: 38.4MB

.pdata
Size: 121KB - Virtual size: 121KB

.gfids
Size: 103KB - Virtual size: 103KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 59KB - Virtual size: 58KB