D:\工作任务\客户公司-任务\福建CA\提速COS\CSP定制\20071_FuJianCA_ANKE\Interface\FJCA_Tcard\Release\TAKCardCert.pdb
Static task
static1
Behavioral task
behavioral1
Sample
50b4cc5420969878a44020a263597c4c2d5cb7f615e557de704cc78f4bfbd438.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50b4cc5420969878a44020a263597c4c2d5cb7f615e557de704cc78f4bfbd438.dll
Resource
win10v2004-20240412-en
General
-
Target
50b4cc5420969878a44020a263597c4c2d5cb7f615e557de704cc78f4bfbd438
-
Size
286KB
-
MD5
7c7c0f1d99dd7233c5ddb31523910e9d
-
SHA1
893b6214f59b4bc2d764aef78381c475dd60ef25
-
SHA256
50b4cc5420969878a44020a263597c4c2d5cb7f615e557de704cc78f4bfbd438
-
SHA512
fa6cca6f13b7141d72ea3dc02baff387f2750c47ae4a0f81ee9d6ccef82a2aa0cf64c3dca7b5f701648ab9e7da2ea166846176325634c23b9e4a6fc7abcb8b6c
-
SSDEEP
6144:oYiaYSKXRiUcytiNn0BwNhL8kZh1/9XEZOZzthXvHo:MPS2RtcNhAkRFUZOBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50b4cc5420969878a44020a263597c4c2d5cb7f615e557de704cc78f4bfbd438
Files
-
50b4cc5420969878a44020a263597c4c2d5cb7f615e557de704cc78f4bfbd438.dll windows:5 windows x86 arch:x86
0e04405a144d128993d130907da2ddae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
ReadFile
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
WriteFile
FormatMessageA
LocalFree
MulDiv
MultiByteToWideChar
lstrlenA
CloseHandle
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
GlobalAlloc
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetFilePointer
FlushFileBuffers
SetEndOfFile
CreateFileA
GetModuleHandleW
GetCPInfo
GetOEMCP
GetFileAttributesA
HeapFree
HeapAlloc
GetCommandLineA
RtlUnwind
ExitProcess
HeapReAlloc
RaiseException
VirtualAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcessHeap
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
VirtualQueryEx
GetCurrentProcess
FreeLibrary
LockResource
SizeofResource
WideCharToMultiByte
LoadResource
FindResourceA
GetCurrentThreadId
GetModuleFileNameA
LeaveCriticalSection
GetCurrentProcessId
DeleteCriticalSection
GetLocalTime
GetLastError
InitializeCriticalSection
SetLastError
Sleep
CreateThread
EnterCriticalSection
user32
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
CheckMenuItem
EnableMenuItem
GetMenuState
GetWindowLongA
GetDlgItem
GetParent
GetNextDlgTabItem
EndDialog
LoadStringA
SetForegroundWindow
AttachThreadInput
SendMessageA
GetForegroundWindow
SetWindowPos
DestroyMenu
EnableWindow
GetWindowThreadProcessId
SetTimer
MessageBoxA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnregisterClassA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
UpdateWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetLastActivePopup
SetCursor
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
gdi32
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
DeleteDC
GetStockObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CoCreateGuid
oleaut32
VariantInit
VariantChangeType
VariantClear
crypt32
CryptVerifyMessageSignature
CryptSignMessage
Exports
Exports
ExitTAKCard
InitTAKCard
TAKCardChangeAdminPin
TAKCardChangeUserPin
TAKCardCloseHandle
TAKCardCreateFile
TAKCardDecrypt
TAKCardDecryptFinal
TAKCardDecryptInit
TAKCardDecryptUpdate
TAKCardDeleteFile
TAKCardDigest
TAKCardDigestFinal
TAKCardDigestInit
TAKCardDigestUpdate
TAKCardECCDecrypt
TAKCardECCGenKey
TAKCardECCGetCertNo
TAKCardECCGetContainerName
TAKCardECCGetPubKey
TAKCardECCGetTempPubKey
TAKCardECCImportKey
TAKCardECCKeyExchange
TAKCardECCReadCert
TAKCardECCSetCertNo
TAKCardECCSetupIECert
TAKCardECCSign
TAKCardECCSignDigest
TAKCardECCWriteCert
TAKCardEncrypt
TAKCardEncryptFinal
TAKCardEncryptInit
TAKCardEncryptUpdate
TAKCardEnumFiles
TAKCardExtECCEncrypt
TAKCardExtECCVerify
TAKCardExtECCVerifyDigest
TAKCardGenRSAKey
TAKCardGetCertNo
TAKCardGetContainerName
TAKCardGetDevState
TAKCardGetDeviceInfo
TAKCardGetFileInfo
TAKCardGetPubKey
TAKCardGetRandom
TAKCardGetRandomAndCert
TAKCardImportRSAKey
TAKCardInitKey
TAKCardInstallUserPin
TAKCardMac
TAKCardMacFinal
TAKCardMacInit
TAKCardMacUpdate
TAKCardOpenEnvelop
TAKCardRSADecrypt
TAKCardRSAEncrypt
TAKCardReadCert
TAKCardReadFile
TAKCardSetCertNo
TAKCardSetSymmKey
TAKCardSetupIECert
TAKCardSign
TAKCardSignDigest
TAKCardSigndata
TAKCardUnlockPin
TAKCardVerifyAdminPin
TAKCardVerifyCachePin
TAKCardVerifyDigest
TAKCardVerifyDigestSoft
TAKCardVerifySignFromServer
TAKCardVerifyUserPin
TAKCardWriteCert
TAKCardWriteFile
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ