74b8abc815798711d55df81d8d6ab1ad64255233c9ed914ce516f6e8b208395e

Sharing

Copy URL Twitter E-mail

General

Target

74b8abc815798711d55df81d8d6ab1ad64255233c9ed914ce516f6e8b208395e
Size

476KB
MD5

026bfc345660fec1af79c1b7b462e75f
SHA1

09790aec51e5e74bc2782bb9359fafdf1d4eb2a9
SHA256

74b8abc815798711d55df81d8d6ab1ad64255233c9ed914ce516f6e8b208395e
SHA512

4ad749cd20ce58b40821052663b6a51e124bc6b6ca2c8d7df153b259a64df1edef9e9052b5091eaf061e57041eef1ec27ca74f19242253b2b6f563c865b0df19
SSDEEP

12288:ZXrBfMAaVF8XEzVuHqw+SSugFZzERlESQr4Xk6M:ZXrQjzoPYugFZKEBrkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b8abc815798711d55df81d8d6ab1ad64255233c9ed914ce516f6e8b208395e

Files

74b8abc815798711d55df81d8d6ab1ad64255233c9ed914ce516f6e8b208395e
.dll windows:5 windows x86 arch:x86

d3941abee80c6198b10735a41008ab55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
RaiseException
FlushFileBuffers
GetLastError
GetLocalTime
GetProcessHeap
SetEndOfFile
GetStringTypeW
LoadLibraryW
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
CloseHandle
SetEvent
lstrcpyA
CreateThread
CreateEventA
FreeLibrary
GetProcAddress
GetModuleFileNameA
LoadLibraryA
MoveFileExA
WriteFile
CreateFileA
DeleteFileA
Sleep
GetTickCount
RemoveDirectoryA
GlobalFree
GlobalAlloc
WaitCommEvent
PurgeComm
ReadFile
GetConsoleCP
GetConsoleMode
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
RtlUnwind
GetFileAttributesA
GetModuleHandleW
ExitProcess
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WriteConsoleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetFilePointer
CreateFileW
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapCreate
HeapDestroy
GetModuleFileNameW
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId

scanermodule

scaner_set_devtype
scaner_set_devprotocol
scaner_set_currscan_mode
scaner_get_version
scaner_get_qrcode

hid

HidD_GetAttributes
HidD_SetFeature
HidD_GetFeature
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetHidGuid
HidD_GetPreparsedData

shlwapi

PathRemoveFileSpecA
PathFileExistsA

imagehlp

MakeSureDirectoryPathExists

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

user32

TranslateMessage
RegisterDeviceNotificationA
DestroyWindow
DispatchMessageA
TranslateAcceleratorA
GetMessageA
ShowWindow
CreateDialogParamA
SendMessageA

Exports

Exports

GetCardInfo
ReadCardT
WriteCardT
iChangePIN
iDoDebit
iDoDebit_HSM_Step1
iDoDebit_HSM_Step1toStep2
iDoDebit_HSM_Step2
iGetPassword
iGetQRBase
iGetReaderInfo
iReadCard
iReadCardBas
iReadCardBas_HSM_Step1
iReadCardBas_HSM_Step1tostep2
iReadCardBas_HSM_Step2
iReadCardType
iReadCardUnclassifiedBas
iReadCard_HSM_Step1
iReadCard_HSM_Step1tostep2
iReadCard_HSM_Step2
iReadDebitRecord
iReadSFZ
iReloadPIN
iReloadPIN_HSM_Step1
iReloadPIN_HSM_Step1tostep2
iReloadPIN_HSM_Step2
iReloadPIN_HSM_Step2tostep3
iReloadPIN_HSM_Step3
iUnblockPIN
iUnblockPIN_HSM_Step1
iUnblockPIN_HSM_Step1tostep2
iUnblockPIN_HSM_Step2
iUnblockPIN_HSM_Step2tostep3
iUnblockPIN_HSM_Step3
iVerifyPIN
iWriteCard
iWriteCard_HSM_Step1
iWriteCard_HSM_Step1tostep2
iWriteCard_HSM_Step2

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d3941abee80c6198b10735a41008ab55

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

scanermodule

hid

shlwapi

imagehlp

setupapi

user32

Exports

Exports

Sections

.text Size: 340KB - Virtual size: 340KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 28KB - Virtual size: 100KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 22KB - Virtual size: 21KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 340KB - Virtual size: 340KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 28KB - Virtual size: 100KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 22KB - Virtual size: 21KB

.rmnet
Size: 56KB - Virtual size: 60KB