bcbdd632f653a49af35506c2a05bdf269f05358254c34d9c6e5de11ced853682

Sharing

Copy URL Twitter E-mail

General

Target

bcbdd632f653a49af35506c2a05bdf269f05358254c34d9c6e5de11ced853682
Size

2.2MB
MD5

b6806f61ec0e40bc353ef6091317e0da
SHA1

9ee789ef54c4f6ee01c57c494ec2cc84b13c9bc6
SHA256

bcbdd632f653a49af35506c2a05bdf269f05358254c34d9c6e5de11ced853682
SHA512

c6fc45a5e9e5458095193914f06b9bc384581feb62b1b69c4a1b7dd97885b00cd2c049eb62d86405f12e77da5557b8cc875e1772a6dfff1039cd9f6e6619a162
SSDEEP

24576:/TCeZaLI7m2uxyy7bvCjZaNx9HNjQRDbPwRNd+PhvvBhZzwakJk8:bZZX7m2uxyy3vGZaeQ2hvVTkJk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcbdd632f653a49af35506c2a05bdf269f05358254c34d9c6e5de11ced853682

Files

bcbdd632f653a49af35506c2a05bdf269f05358254c34d9c6e5de11ced853682
.exe windows:4 windows x86 arch:x86

48522efc6e74e2052b9188797d7efb0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hid

HidD_GetPreparsedData
HidD_GetAttributes
HidD_FreePreparsedData
HidP_GetCaps
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_MaxUsageListLength
HidD_GetProductString
HidD_GetHidGuid

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

stdfu

STDFU_Dnload
STDFU_Close
STDFU_Getstatus
STDFU_Clrstatus
STDFU_Upload
STDFU_SelectCurrentConfiguration
STDFU_Abort
STDFU_Open

libusb0

usb_find_devices
usb_find_busses
usb_init
usb_close
usb_get_string_simple
usb_open
usb_get_busses
usb_claim_interface
usb_set_configuration
usb_release_interface
usb_interrupt_read
usb_bulk_write

kernel32

GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetStdHandle
GetFileType
GetACP
TerminateProcess
HeapSize
FatalAppExitA
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetPrivateProfileStringA
Sleep
GetPrivateProfileIntA
WideCharToMultiByte
MultiByteToWideChar
LockResource
LoadResource
FindResourceA
WritePrivateProfileStringA
lstrcpyA
lstrcpynA
GetSystemDefaultLCID
GetModuleFileNameA
HeapAlloc
HeapFree
RtlUnwind
GetTickCount
SetErrorMode
GetCurrentDirectoryA
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
CopyFileA
GlobalSize
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GlobalAlloc
GetCurrentThread
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
SetLastError
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
MulDiv
CloseHandle
LocalAlloc
CreateFileA
GetLastError
FreeEnvironmentStringsA

user32

LoadStringA
GetDialogBaseUnits
GetMenuStringA
LockWindowUpdate
DestroyIcon
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetTabbedTextExtentA
RegisterClipboardFormatA
PostThreadMessageA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
GetMessageA
TranslateMessage
ValidateRect
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
FindWindowA
wvsprintfA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
OemToCharA
CharToOemA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
GetClassNameA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
DefMDIChildProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowLongA
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetSystemMetrics
LoadMenuA
LoadIconA
wsprintfA
GetCursorPos
GetDCEx
GetClassLongA
BeginDeferWindowPos
EndDeferWindowPos
IsRectEmpty
GetSysColorBrush
RegisterDeviceNotificationA
CharUpperW
MessageBoxA
UpdateWindow
EnableMenuItem
GetMenuItemCount
ModifyMenuA
RemoveMenu
InsertMenuA
DrawMenuBar
SetWindowPos
GetMenu
CharUpperA
DestroyCursor
MapDialogRect
SetWindowContextHelpId
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetSubMenu
ClientToScreen
DrawEdge
InflateRect
DrawTextA
GetCapture
ReleaseCapture
SetCapture
ClipCursor
PtInRect
InvertRect
PostMessageA
LoadCursorA
SetCursor
GetDC
ShowOwnedPopups
PostQuitMessage
SetRect
WindowFromPoint
GetSystemMenu
DeleteMenu
ReleaseDC
GetClientRect
InvalidateRect
GetKeyState
FillRect
IntersectRect
GetClassInfoA
DefWindowProcA
SystemParametersInfoA
RedrawWindow
LoadImageA
GetFocus
ScreenToClient
GetWindow
AppendMenuA
SetParent
IsZoomed
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
LoadAcceleratorsA
CreateWindowExA
SetRectEmpty
GetWindowRect
SendMessageA
IsWindow
GetParent
EnableWindow
GetScrollPos
SetScrollPos
SetScrollRange
KillTimer
GetScrollRange
SetTimer
OffsetRect
CopyRect
GetSysColor
RemovePropA
TranslateAcceleratorA
SetDlgItemInt

gdi32

DPtoLP
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
LPtoDP
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
SetRectRgn
CombineRgn
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
CopyMetaFileA
BitBlt
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetTextColor
GetDeviceCaps
PatBlt
Rectangle
GetCurrentObject
GetObjectA
GetTextMetricsA
GetTextExtentPoint32A
GetTextExtentPointA
CreateDIBitmap
CreatePen
CreateFontIndirectA
PolyBezierTo
DeleteObject

comdlg32

GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
PageSetupDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegSetValueA
RegCloseKey

shell32

SHGetFileInfoA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA

comctl32

ImageList_GetImageInfo
ImageList_Draw
ImageList_ReplaceIcon
ord17
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ImageList_SetBkColor

oledlg

ord8

ole32

SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
CoRegisterClassObject
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoFreeUnusedLibraries

olepro32

ord253

oleaut32

VariantCopy
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
CreateErrorInfo
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysFreeString
SysAllocStringLen
SysStringLen
SysReAllocStringLen
VariantTimeToSystemTime
LoadTypeLi
VariantChangeType
GetErrorInfo
SetErrorInfo
VariantClear

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 664KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48522efc6e74e2052b9188797d7efb0a

Headers

File Characteristics

Imports

hid

setupapi

stdfu

libusb0

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 168KB - Virtual size: 167KB

.data Size: 40KB - Virtual size: 66KB

.idata Size: 20KB - Virtual size: 18KB

.rsrc Size: 664KB - Virtual size: 662KB

.reloc Size: 76KB - Virtual size: 73KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 168KB - Virtual size: 167KB

.data
Size: 40KB - Virtual size: 66KB

.idata
Size: 20KB - Virtual size: 18KB

.rsrc
Size: 664KB - Virtual size: 662KB

.reloc
Size: 76KB - Virtual size: 73KB