755c28812c403eb856c020b3463397417d24d3258b883edfa8a8be5730a4510c

Sharing

Copy URL Twitter E-mail

General

Target

755c28812c403eb856c020b3463397417d24d3258b883edfa8a8be5730a4510c
Size

84KB
MD5

1e3e4f4057e8b94fb2846c665c7cab9a
SHA1

13cb26e3a8e775f7d041617dab44b769c1d45589
SHA256

755c28812c403eb856c020b3463397417d24d3258b883edfa8a8be5730a4510c
SHA512

6e8c5109145d04abc6d6bcc7ce056dccd150ad0ad8a6a1eb5dde3e675ba6bb3f26a027575df19df8ed8f08656671167032f1858444e7bbc251f7f97ffb7961ed
SSDEEP

1536:76eIfknO7bgubMo/tZEALFo8SPmT8bTXAw7F5QEIu:ueNeYuZwHXAwh5ku

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
755c28812c403eb856c020b3463397417d24d3258b883edfa8a8be5730a4510c

Files

755c28812c403eb856c020b3463397417d24d3258b883edfa8a8be5730a4510c
.exe windows:5 windows x86 arch:x86

b225ab04a24e66bbf4bfcbf685aabe0a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetupComm
ClearCommError
IsBadReadPtr
GetFileSize
GetSystemDefaultLCID
CreateThread
OpenFile
FlushFileBuffers
GetCommTimeouts
HeapSize
WriteConsoleW
PurgeComm
WriteConsoleA
SetStdHandle
GetLocaleInfoA
SetCommTimeouts
GetCommState
SetCommState
ReadFile
Sleep
GetLastError
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
LoadLibraryA
FormatMessageA
OutputDebugStringA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetConsoleOutputCP
QueryPerformanceCounter
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount

user32

DialogBoxParamA
DestroyWindow
MessageBoxA
DefWindowProcA
SetWindowTextA
PostQuitMessage
GetDlgItem
EnableWindow
PostMessageA
GetDlgItemTextA
CharUpperA
CharUpperBuffA
SendDlgItemMessageA
SetDlgItemTextA

comdlg32

GetOpenFileNameA

advapi32

RegCloseKey
RegQueryValueExA

setupapi

CM_Get_Parent
CM_Get_DevNode_Registry_PropertyA
CM_Get_Device_IDA
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA

ch375dll

CH375CloseDevice
CH375GetDeviceName
CH375GetUsbID
CH375OpenDevice
CH375ReadData
CH375WriteData
CH375SetDeviceNotify

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b225ab04a24e66bbf4bfcbf685aabe0a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

setupapi

ch375dll

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 152KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 152KB

.rsrc
Size: 4KB - Virtual size: 3KB