E:\c++\project\rfidlib\new_dll_projs\reader_driver\rfidlib_drv_RL8000\debug_unicode\rfidlib_drv_RL8000.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9664ed02a6e6f93022aac6dd34641b530d809c9d9d5dff379981f6b19973c80b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9664ed02a6e6f93022aac6dd34641b530d809c9d9d5dff379981f6b19973c80b.dll
Resource
win10v2004-20240226-en
General
-
Target
9664ed02a6e6f93022aac6dd34641b530d809c9d9d5dff379981f6b19973c80b
-
Size
2.1MB
-
MD5
93f7afbce279313b24c5659b755f43cc
-
SHA1
875aac09473b9814a0f49fc48ce592a52d2d64dd
-
SHA256
9664ed02a6e6f93022aac6dd34641b530d809c9d9d5dff379981f6b19973c80b
-
SHA512
2e1bada9b5bd1b4c229b1e76796769b2fdd0b5c5bcb20f08a40fde884c8c9c98aaccc54137cdd7be390774fa8f717806c23cd0ae419f3a5a5112a9bd5033830d
-
SSDEEP
24576:VKSPa+HU/lHzfhWCAj0HD0Szs7fcebIcA+ig8teTufUHUlk73yeV5:VKSC+HU/lHeqWEYMpUHA2CeV5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9664ed02a6e6f93022aac6dd34641b530d809c9d9d5dff379981f6b19973c80b
Files
-
9664ed02a6e6f93022aac6dd34641b530d809c9d9d5dff379981f6b19973c80b.dll windows:6 windows x86 arch:x86
f89b321eade578699636447b973b91c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
hid
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_FlushQueue
HidD_GetSerialNumberString
HidP_GetCaps
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
ws2_32
setsockopt
send
select
recv
inet_addr
htons
getsockopt
ioctlsocket
connect
closesocket
bind
__WSAFDIsSet
socket
WSAStartup
WSACleanup
WSAGetLastError
shutdown
kernel32
ReadConsoleW
SetFilePointerEx
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
HeapQueryInformation
HeapSize
HeapReAlloc
GetConsoleMode
EnumSystemLocalesW
DecodePointer
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
lstrlenW
FindResourceW
lstrlenA
MultiByteToWideChar
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
TerminateThread
ResumeThread
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventW
IsBadReadPtr
IsBadWritePtr
WaitForMultipleObjects
GetFileSize
WriteFile
SetFilePointer
GetModuleFileNameW
GetPrivateProfileStringW
CreateFileW
WideCharToMultiByte
GetOverlappedResult
ReadFile
PurgeComm
CancelIo
ClearCommError
SetupComm
GetCommState
SetCommState
SetCommTimeouts
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
CreateSemaphoreW
GetModuleFileNameA
GetConsoleCP
OutputDebugStringW
GetLocalTime
GetUserDefaultLCID
SetEndOfFile
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetACP
GetCurrentThread
SetConsoleCtrlHandler
WaitForSingleObjectEx
WriteConsoleW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
RtlUnwind
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
GetFileType
OutputDebugStringA
user32
CharUpperW
PostMessageW
SendMessageW
CharNextW
UnregisterClassW
wsprintfW
LoadStringW
oleaut32
SysFreeString
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Exports
Exports
PLUG_GetLink
RL8000_Enum
RL8000_GetEnumItem
RL8000_GetLibVersion
RL8000_SerOpen
RL8000_TCPOpen
RL8000_USBOpen
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ