ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

Sharing

Copy URL Twitter E-mail

General

Target
ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143
Size 316KB
Sample240417-m51ryaed3x
SHA256 ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143
MD5 70fec2dfc02204462cfbd93478c00006
SHA1 f1369883c3c694e4f1f11b0450f4535b771eff0f
SHA512 91813c68c99b086b500d9c7f79c33704433919cbcc4d5374413e4c7079f435e33dd1b42b4d702b9af103b44afc23ab410a4901b987745971718a51718daedb7a
SSDEEP 6144:YgqjIvA0gSRCgH1uPrSCNfPHzA+up38nvbFUQ:Ygq8PgKCvJu98nb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

File Explorer

ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

.dll 316KB

ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

IMPHASH dee7078bedffd653ce554b489f7bfa41
SHA256 ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143
MD5 70fec2dfc02204462cfbd93478c00006
SHA1 f1369883c3c694e4f1f11b0450f4535b771eff0f
SHA512 91813c68c99b086b500d9c7f79c33704433919cbcc4d5374413e4c7079f435e33dd1b42b4d702b9af103b44afc23ab410a4901b987745971718a51718daedb7a
SSDEEP 6144:YgqjIvA0gSRCgH1uPrSCNfPHzA+up38nvbFUQ:Ygq8PgKCvJu98nb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

270336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleHandleA GetCurrentDirectoryA Sleep FreeLibrary GetProcAddress LoadLibraryA WideCharToMultiByte MultiByteToWideChar CompareStringW CompareStringA SetCurrentDirectoryA SetEndOfFile GetOEMCP GetACP IsBadCodePtr IsBadReadPtr GetStringTypeW GetStringTypeA GetPrivateProfileIntA GetPrivateProfileStringA CreateFileA CloseHandle CreateMutexA GetLastError WaitForSingleObject SetStdHandle ReleaseMutex DisableThreadLibraryCalls GetModuleFileNameA GetSystemDefaultLangID GetCPInfo FlushFileBuffers SetUnhandledExceptionFilter GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA TlsGetValue SetLastError TlsFree TlsAlloc TlsSetValue GetCurrentThreadId EnterCriticalSection InitializeCriticalSection InterlockedExchange DeleteCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement HeapFree HeapAlloc GetTimeZoneInformation GetSystemTime GetLocalTime DeleteFileA RtlUnwind GetCommandLineA GetVersion RaiseException ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ReadFile WriteFile HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr TerminateProcess GetCurrentProcess HeapSize LCMapStringA LCMapStringW SetEnvironmentVariableA

user32

DialogBoxParamA SetFocus GetDlgItem SetWindowPos GetSystemMetrics GetWindowRect FindWindowA GetDlgItemTextA EndDialog

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA

hid

HidD_GetAttributes HidD_GetHidGuid HidD_SetFeature HidD_GetFeature

gdiplus

GdipFree GdipCloneImage GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToFile GdipDisposeImage GdipCreateBitmapFromFile GdiplusStartup GdipAlloc

BWlist_ClearAll BWlist_DeleteData BWlist_FindData BWlist_GetListCount BWlist_IsEmpty BWlist_ReadData BWlist_WriteData Get_CardNO2_MagCard Get_Password Get_Scan_Code Get_Scan_DevId HexToStr ICCPowerOff ICCPowerOn ICC_ActiveKey ICC_ChangeLight ICC_CtlLight ICC_DispInfo ICC_DispSound ICC_DownLoadKey ICC_DownLoadMainKey ICC_DownLoadUserKey ICC_GetDESMAC ICC_GetEnPass ICC_GetInputPass ICC_GetInputPassENC ICC_GetInputPassEx ICC_GetKeyValue ICC_PosBeep ICC_Reader_24c_PowerOff ICC_Reader_24c_PowerOn ICC_Reader_24c_Read ICC_Reader_24c_Write ICC_Reader_4428_Change ICC_Reader_4428_ChangeHEX ICC_Reader_4428_PowerOff ICC_Reader_4428_PowerOn ICC_Reader_4428_PowerOnHEX ICC_Reader_4428_Read ICC_Reader_4428_ReadCount ICC_Reader_4428_ReadHEX ICC_Reader_4428_ReadProtect ICC_Reader_4428_Verify ICC_Reader_4428_VerifyHEX ICC_Reader_4428_Write ICC_Reader_4428_WriteHEX ICC_Reader_4428_WriteProtect ICC_Reader_4442_Change ICC_Reader_4442_ChangeHEX ICC_Reader_4442_PowerOff ICC_Reader_4442_PowerOn ICC_Reader_4442_PowerOnHEX ICC_Reader_4442_Read ICC_Reader_4442_ReadCount ICC_Reader_4442_ReadHEX ICC_Reader_4442_ReadProtect ICC_Reader_4442_Verify ICC_Reader_4442_VerifyHEX ICC_Reader_4442_Write ICC_Reader_4442_WriteHEX ICC_Reader_4442_WriteProtect ICC_Reader_Application ICC_Reader_ApplicationHEX ICC_Reader_AutoCardType ICC_Reader_CertInfo ICC_Reader_ChangeSlot ICC_Reader_ClearScreen ICC_Reader_Close ICC_Reader_DisCardType ICC_Reader_DispInfo ICC_Reader_DisplayInfo ICC_Reader_ExitDisInfo ICC_Reader_FirmwareRW ICC_Reader_GetDevID ICC_Reader_GetDeviceCSN ICC_Reader_GetDeviceSN ICC_Reader_GetDeviceVersion ICC_Reader_GetKeyBoardVersion ICC_Reader_GetMagCardMode ICC_Reader_GetPIN ICC_Reader_GetPIN_QH ICC_Reader_GetPass ICC_Reader_GetRandom ICC_Reader_GetSFZInfo ICC_Reader_GetStatus ICC_Reader_Libinfo ICC_Reader_LoadFonts ICC_Reader_LoadPicture ICC_Reader_MessageDataEncrypt ICC_Reader_Open ICC_Reader_PictureScroll ICC_Reader_PowerOff ICC_Reader_PowerOn ICC_Reader_PowerOnHEX ICC_Reader_QRcodeDisplay ICC_Reader_ReadEEPROM ICC_Reader_ReadIDCardInfos ICC_Reader_ScanCode ICC_Reader_ScanOutMode ICC_Reader_SetDeviceReadMode ICC_Reader_SetDeviceSN ICC_Reader_SetIDReadMode ICC_Reader_SetMagCardMode ICC_Reader_StopAutoCardType ICC_Reader_WriteEEPROM ICC_Reader_hot_PowerOn ICC_Reader_pre_PowerOn ICC_SetCpupara ICC_SetKeyBoardLength IDReader_Close IDReader_Open PICC_CardEmulation PICC_CardEmulation_Read PICC_Reader_Application PICC_Reader_ApplicationLong PICC_Reader_Authentication PICC_Reader_Authentication_Pass PICC_Reader_Authentication_PassHEX PICC_Reader_Decrement PICC_Reader_FindCard PICC_Reader_ID_Read PICC_Reader_ID_ReadAll PICC_Reader_ID_ReadUID PICC_Reader_ID_Request PICC_Reader_ID_Select PICC_Reader_Increment PICC_Reader_Initval PICC_Reader_LoadKey PICC_Reader_LoadKeyHEX PICC_Reader_PowerOnTypeA PICC_Reader_PowerOnTypeB PICC_Reader_RFControl PICC_Reader_Read PICC_Reader_ReadCertAndFinger PICC_Reader_ReadCertInfo PICC_Reader_ReadHEX PICC_Reader_ReadIDInfo PICC_Reader_ReadIDMsg PICC_Reader_ReadIDPhotoInfo PICC_Reader_Readval PICC_Reader_Request PICC_Reader_Select PICC_Reader_SetTypeA PICC_Reader_SetTypeB PICC_Reader_Write PICC_Reader_WriteHEX PICC_Reader_anticoll PICC_Ultralight_Read PICC_Ultralight_Write Rcard ReadIDCardBaseInfo ResetCard SetPowerOffDelay StrToHex Transmit iReaderGetPass test

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_CSP_SHA

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rmnet

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

ed24bf4f808e131af9a675434289d16ae4c5e85666869eff7fbef05003a18143

kernel32

user32

setupapi

hid

gdiplus

generic