E:\c++\project\rfidlib\new_dll_projs\reader_driver\rfidlib_ANM201\Debug_Unicode\rfidlib_ANM201.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2c0be789d44b4fac867c6df2d16afd0fcbe3d447901995cee37a84f00d9a45ac.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2c0be789d44b4fac867c6df2d16afd0fcbe3d447901995cee37a84f00d9a45ac.dll
Resource
win10v2004-20240226-en
General
-
Target
2c0be789d44b4fac867c6df2d16afd0fcbe3d447901995cee37a84f00d9a45ac
-
Size
2.3MB
-
MD5
5e5d5cc6f4aea46efe3fa97fab17a4c3
-
SHA1
0863f5c97812bea94d624bf12c8e437c42c8de9f
-
SHA256
2c0be789d44b4fac867c6df2d16afd0fcbe3d447901995cee37a84f00d9a45ac
-
SHA512
fdd034fc4107c73844573c78bb44b28679c63b0ef4a9a2c5d6b47f36bfb895746f73e0d3f902e8fb1d97623c483f4e09a1ec93532f6b7ba439ca7ac840660965
-
SSDEEP
24576:sCxRmM9c2gopXecqqNUbhi4eipB86xCP1TTTBh6pOg84ZZM+g:sCx53ptqlb5psTTTfBg84ZZMf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c0be789d44b4fac867c6df2d16afd0fcbe3d447901995cee37a84f00d9a45ac
Files
-
2c0be789d44b4fac867c6df2d16afd0fcbe3d447901995cee37a84f00d9a45ac.dll windows:6 windows x86 arch:x86
f5762160b4fcfc20a7f66828d5884351
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
hid
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_FlushQueue
HidD_GetSerialNumberString
HidP_GetCaps
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
kernel32
ReadConsoleW
SetFilePointerEx
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
DecodePointer
FreeLibrary
GetProcAddress
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CloseHandle
LoadLibraryW
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InterlockedIncrement
InterlockedDecrement
lstrlenW
FindResourceW
lstrlenA
MultiByteToWideChar
IsBadReadPtr
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateThread
WaitForSingleObject
CreateEventW
GetFileSize
WriteFile
SetFilePointer
GetModuleFileNameW
GetPrivateProfileStringW
CreateFileW
GetOverlappedResult
SetEvent
ResetEvent
WaitForMultipleObjects
ReadFile
PurgeComm
CancelIo
ClearCommError
SetupComm
GetCommState
SetCommState
SetCommTimeouts
CreateThread
ResumeThread
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
CreateSemaphoreW
GetModuleFileNameA
GetConsoleCP
OutputDebugStringW
GetLocalTime
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
HeapQueryInformation
HeapSize
SetEndOfFile
HeapReAlloc
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetACP
SetConsoleCtrlHandler
WaitForSingleObjectEx
IsDebuggerPresent
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetCurrentThread
GetStdHandle
GetFileType
OutputDebugStringA
WriteConsoleW
user32
SendMessageW
UnregisterClassW
CharNextW
CharUpperW
wsprintfW
LoadStringW
PostMessageW
oleaut32
SysFreeString
ws2_32
__WSAFDIsSet
connect
ioctlsocket
getsockopt
select
send
setsockopt
shutdown
socket
WSAStartup
WSACleanup
WSAGetLastError
WSAStringToAddressW
closesocket
recv
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Exports
Exports
ANM201_Close
ANM201_GetLibVersion
ANM201_GetNoiseLevel
ANM201_Open
PLUG_GetLink
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ