ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

Sharing

Copy URL Twitter E-mail

General

Target

ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143
Size

316KB
MD5

70fec2dfc02204462cfbd93478c00006
SHA1

f1369883c3c694e4f1f11b0450f4535b771eff0f
SHA256

ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143
SHA512

91813c68c99b086b500d9c7f79c33704433919cbcc4d5374413e4c7079f435e33dd1b42b4d702b9af103b44afc23ab410a4901b987745971718a51718daedb7a
SSDEEP

6144:YgqjIvA0gSRCgH1uPrSCNfPHzA+up38nvbFUQ:Ygq8PgKCvJu98nb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

Files

ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143
.dll windows:4 windows x86 arch:x86

dee7078bedffd653ce554b489f7bfa41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetCurrentDirectoryA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
CompareStringA
SetCurrentDirectoryA
SetEndOfFile
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileA
CloseHandle
CreateMutexA
GetLastError
WaitForSingleObject
SetStdHandle
ReleaseMutex
DisableThreadLibraryCalls
GetModuleFileNameA
GetSystemDefaultLangID
GetCPInfo
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA
LCMapStringW
SetEnvironmentVariableA

user32

DialogBoxParamA
SetFocus
GetDlgItem
SetWindowPos
GetSystemMetrics
GetWindowRect
FindWindowA
GetDlgItemTextA
EndDialog

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

hid

HidD_GetAttributes
HidD_GetHidGuid
HidD_SetFeature
HidD_GetFeature

gdiplus

GdipFree
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipDisposeImage
GdipCreateBitmapFromFile
GdiplusStartup
GdipAlloc

Exports

Exports

BWlist_ClearAll
BWlist_DeleteData
BWlist_FindData
BWlist_GetListCount
BWlist_IsEmpty
BWlist_ReadData
BWlist_WriteData
Get_CardNO2_MagCard
Get_Password
Get_Scan_Code
Get_Scan_DevId
HexToStr
ICCPowerOff
ICCPowerOn
ICC_ActiveKey
ICC_ChangeLight
ICC_CtlLight
ICC_DispInfo
ICC_DispSound
ICC_DownLoadKey
ICC_DownLoadMainKey
ICC_DownLoadUserKey
ICC_GetDESMAC
ICC_GetEnPass
ICC_GetInputPass
ICC_GetInputPassENC
ICC_GetInputPassEx
ICC_GetKeyValue
ICC_PosBeep
ICC_Reader_24c_PowerOff
ICC_Reader_24c_PowerOn
ICC_Reader_24c_Read
ICC_Reader_24c_Write
ICC_Reader_4428_Change
ICC_Reader_4428_ChangeHEX
ICC_Reader_4428_PowerOff
ICC_Reader_4428_PowerOn
ICC_Reader_4428_PowerOnHEX
ICC_Reader_4428_Read
ICC_Reader_4428_ReadCount
ICC_Reader_4428_ReadHEX
ICC_Reader_4428_ReadProtect
ICC_Reader_4428_Verify
ICC_Reader_4428_VerifyHEX
ICC_Reader_4428_Write
ICC_Reader_4428_WriteHEX
ICC_Reader_4428_WriteProtect
ICC_Reader_4442_Change
ICC_Reader_4442_ChangeHEX
ICC_Reader_4442_PowerOff
ICC_Reader_4442_PowerOn
ICC_Reader_4442_PowerOnHEX
ICC_Reader_4442_Read
ICC_Reader_4442_ReadCount
ICC_Reader_4442_ReadHEX
ICC_Reader_4442_ReadProtect
ICC_Reader_4442_Verify
ICC_Reader_4442_VerifyHEX
ICC_Reader_4442_Write
ICC_Reader_4442_WriteHEX
ICC_Reader_4442_WriteProtect
ICC_Reader_Application
ICC_Reader_ApplicationHEX
ICC_Reader_AutoCardType
ICC_Reader_CertInfo
ICC_Reader_ChangeSlot
ICC_Reader_ClearScreen
ICC_Reader_Close
ICC_Reader_DisCardType
ICC_Reader_DispInfo
ICC_Reader_DisplayInfo
ICC_Reader_ExitDisInfo
ICC_Reader_FirmwareRW
ICC_Reader_GetDevID
ICC_Reader_GetDeviceCSN
ICC_Reader_GetDeviceSN
ICC_Reader_GetDeviceVersion
ICC_Reader_GetKeyBoardVersion
ICC_Reader_GetMagCardMode
ICC_Reader_GetPIN
ICC_Reader_GetPIN_QH
ICC_Reader_GetPass
ICC_Reader_GetRandom
ICC_Reader_GetSFZInfo
ICC_Reader_GetStatus
ICC_Reader_Libinfo
ICC_Reader_LoadFonts
ICC_Reader_LoadPicture
ICC_Reader_MessageDataEncrypt
ICC_Reader_Open
ICC_Reader_PictureScroll
ICC_Reader_PowerOff
ICC_Reader_PowerOn
ICC_Reader_PowerOnHEX
ICC_Reader_QRcodeDisplay
ICC_Reader_ReadEEPROM
ICC_Reader_ReadIDCardInfos
ICC_Reader_ScanCode
ICC_Reader_ScanOutMode
ICC_Reader_SetDeviceReadMode
ICC_Reader_SetDeviceSN
ICC_Reader_SetIDReadMode
ICC_Reader_SetMagCardMode
ICC_Reader_StopAutoCardType
ICC_Reader_WriteEEPROM
ICC_Reader_hot_PowerOn
ICC_Reader_pre_PowerOn
ICC_SetCpupara
ICC_SetKeyBoardLength
IDReader_Close
IDReader_Open
PICC_CardEmulation
PICC_CardEmulation_Read
PICC_Reader_Application
PICC_Reader_ApplicationLong
PICC_Reader_Authentication
PICC_Reader_Authentication_Pass
PICC_Reader_Authentication_PassHEX
PICC_Reader_Decrement
PICC_Reader_FindCard
PICC_Reader_ID_Read
PICC_Reader_ID_ReadAll
PICC_Reader_ID_ReadUID
PICC_Reader_ID_Request
PICC_Reader_ID_Select
PICC_Reader_Increment
PICC_Reader_Initval
PICC_Reader_LoadKey
PICC_Reader_LoadKeyHEX
PICC_Reader_PowerOnTypeA
PICC_Reader_PowerOnTypeB
PICC_Reader_RFControl
PICC_Reader_Read
PICC_Reader_ReadCertAndFinger
PICC_Reader_ReadCertInfo
PICC_Reader_ReadHEX
PICC_Reader_ReadIDInfo
PICC_Reader_ReadIDMsg
PICC_Reader_ReadIDPhotoInfo
PICC_Reader_Readval
PICC_Reader_Request
PICC_Reader_Select
PICC_Reader_SetTypeA
PICC_Reader_SetTypeB
PICC_Reader_Write
PICC_Reader_WriteHEX
PICC_Reader_anticoll
PICC_Ultralight_Read
PICC_Ultralight_Write
Rcard
ReadIDCardBaseInfo
ResetCard
SetPowerOffDelay
StrToHex
Transmit
iReaderGetPass
test

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_CSP_SHA
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dee7078bedffd653ce554b489f7bfa41

Headers

File Characteristics

Imports

kernel32

user32

setupapi

hid

gdiplus

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 20KB - Virtual size: 25KB

_CSP_SHA Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 20KB - Virtual size: 25KB

_CSP_SHA
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB

.rmnet
Size: 60KB - Virtual size: 60KB