e3f2de1986e081414149b54ad7fcceb70adebb4cc963f24b71c62ff936231a73

Sharing

Copy URL Twitter E-mail

General

Target

e3f2de1986e081414149b54ad7fcceb70adebb4cc963f24b71c62ff936231a73
Size

316KB
MD5

77aa8222358e9dd49acb13bc94d8bf8f
SHA1

aadbd209cdaf23ad78b77b0cbc47843caefd0cea
SHA256

e3f2de1986e081414149b54ad7fcceb70adebb4cc963f24b71c62ff936231a73
SHA512

77d214e5dc48837dedea182aa7e1c564aeab8dd6cf2b1b27db58d6248584d0d417140bdbdb87c9112937fadef56d89160d9db2dd4c7c58e37162bc036707aa6c
SSDEEP

6144:QgqjIvA0gSRCgH1uPrSCNfLHzA+up38nvbFUQ:Qgq8PgKCzJu98nb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3f2de1986e081414149b54ad7fcceb70adebb4cc963f24b71c62ff936231a73

Files

e3f2de1986e081414149b54ad7fcceb70adebb4cc963f24b71c62ff936231a73
.dll windows:4 windows x86 arch:x86

dee7078bedffd653ce554b489f7bfa41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetCurrentDirectoryA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
CompareStringA
SetCurrentDirectoryA
SetEndOfFile
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileA
CloseHandle
CreateMutexA
GetLastError
WaitForSingleObject
SetStdHandle
ReleaseMutex
DisableThreadLibraryCalls
GetModuleFileNameA
GetSystemDefaultLangID
GetCPInfo
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA
LCMapStringW
SetEnvironmentVariableA

user32

DialogBoxParamA
SetFocus
GetDlgItem
SetWindowPos
GetSystemMetrics
GetWindowRect
FindWindowA
GetDlgItemTextA
EndDialog

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

hid

HidD_GetAttributes
HidD_GetHidGuid
HidD_SetFeature
HidD_GetFeature

gdiplus

GdipFree
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipDisposeImage
GdipCreateBitmapFromFile
GdiplusStartup
GdipAlloc

Exports

Exports

BWlist_ClearAll
BWlist_DeleteData
BWlist_FindData
BWlist_GetListCount
BWlist_IsEmpty
BWlist_ReadData
BWlist_WriteData
Get_CardNO2_MagCard
Get_Password
Get_Scan_Code
Get_Scan_DevId
HexToStr
ICCPowerOff
ICCPowerOn
ICC_ActiveKey
ICC_ChangeLight
ICC_CtlLight
ICC_DispInfo
ICC_DispSound
ICC_DownLoadKey
ICC_DownLoadMainKey
ICC_DownLoadUserKey
ICC_GetDESMAC
ICC_GetEnPass
ICC_GetInputPass
ICC_GetInputPassENC
ICC_GetInputPassEx
ICC_GetKeyValue
ICC_PosBeep
ICC_Reader_24c_PowerOff
ICC_Reader_24c_PowerOn
ICC_Reader_24c_Read
ICC_Reader_24c_Write
ICC_Reader_4428_Change
ICC_Reader_4428_ChangeHEX
ICC_Reader_4428_PowerOff
ICC_Reader_4428_PowerOn
ICC_Reader_4428_PowerOnHEX
ICC_Reader_4428_Read
ICC_Reader_4428_ReadCount
ICC_Reader_4428_ReadHEX
ICC_Reader_4428_ReadProtect
ICC_Reader_4428_Verify
ICC_Reader_4428_VerifyHEX
ICC_Reader_4428_Write
ICC_Reader_4428_WriteHEX
ICC_Reader_4428_WriteProtect
ICC_Reader_4442_Change
ICC_Reader_4442_ChangeHEX
ICC_Reader_4442_PowerOff
ICC_Reader_4442_PowerOn
ICC_Reader_4442_PowerOnHEX
ICC_Reader_4442_Read
ICC_Reader_4442_ReadCount
ICC_Reader_4442_ReadHEX
ICC_Reader_4442_ReadProtect
ICC_Reader_4442_Verify
ICC_Reader_4442_VerifyHEX
ICC_Reader_4442_Write
ICC_Reader_4442_WriteHEX
ICC_Reader_4442_WriteProtect
ICC_Reader_Application
ICC_Reader_ApplicationHEX
ICC_Reader_AutoCardType
ICC_Reader_CertInfo
ICC_Reader_ChangeSlot
ICC_Reader_ClearScreen
ICC_Reader_Close
ICC_Reader_DisCardType
ICC_Reader_DispInfo
ICC_Reader_DisplayInfo
ICC_Reader_ExitDisInfo
ICC_Reader_FirmwareRW
ICC_Reader_GetDevID
ICC_Reader_GetDeviceCSN
ICC_Reader_GetDeviceSN
ICC_Reader_GetDeviceVersion
ICC_Reader_GetKeyBoardVersion
ICC_Reader_GetMagCardMode
ICC_Reader_GetPIN
ICC_Reader_GetPIN_QH
ICC_Reader_GetPass
ICC_Reader_GetRandom
ICC_Reader_GetSFZInfo
ICC_Reader_GetStatus
ICC_Reader_Libinfo
ICC_Reader_LoadFonts
ICC_Reader_LoadPicture
ICC_Reader_MessageDataEncrypt
ICC_Reader_Open
ICC_Reader_PictureScroll
ICC_Reader_PowerOff
ICC_Reader_PowerOn
ICC_Reader_PowerOnHEX
ICC_Reader_QRcodeDisplay
ICC_Reader_ReadEEPROM
ICC_Reader_ReadIDCardInfos
ICC_Reader_ScanCode
ICC_Reader_ScanOutMode
ICC_Reader_SetDeviceReadMode
ICC_Reader_SetDeviceSN
ICC_Reader_SetIDReadMode
ICC_Reader_SetMagCardMode
ICC_Reader_StopAutoCardType
ICC_Reader_WriteEEPROM
ICC_Reader_hot_PowerOn
ICC_Reader_pre_PowerOn
ICC_SetCpupara
ICC_SetKeyBoardLength
IDReader_Close
IDReader_Open
PICC_CardEmulation
PICC_CardEmulation_Read
PICC_Reader_Application
PICC_Reader_ApplicationLong
PICC_Reader_Authentication
PICC_Reader_Authentication_Pass
PICC_Reader_Authentication_PassHEX
PICC_Reader_Decrement
PICC_Reader_FindCard
PICC_Reader_ID_Read
PICC_Reader_ID_ReadAll
PICC_Reader_ID_ReadUID
PICC_Reader_ID_Request
PICC_Reader_ID_Select
PICC_Reader_Increment
PICC_Reader_Initval
PICC_Reader_LoadKey
PICC_Reader_LoadKeyHEX
PICC_Reader_PowerOnTypeA
PICC_Reader_PowerOnTypeB
PICC_Reader_RFControl
PICC_Reader_Read
PICC_Reader_ReadCertAndFinger
PICC_Reader_ReadCertInfo
PICC_Reader_ReadHEX
PICC_Reader_ReadIDInfo
PICC_Reader_ReadIDMsg
PICC_Reader_ReadIDPhotoInfo
PICC_Reader_Readval
PICC_Reader_Request
PICC_Reader_Select
PICC_Reader_SetTypeA
PICC_Reader_SetTypeB
PICC_Reader_Write
PICC_Reader_WriteHEX
PICC_Reader_anticoll
PICC_Ultralight_Read
PICC_Ultralight_Write
Rcard
ReadIDCardBaseInfo
ResetCard
SetPowerOffDelay
StrToHex
Transmit
iReaderGetPass
test

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_CSP_SHA
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dee7078bedffd653ce554b489f7bfa41

Headers

File Characteristics

Imports

kernel32

user32

setupapi

hid

gdiplus

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 20KB - Virtual size: 25KB

_CSP_SHA Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 20KB - Virtual size: 25KB

_CSP_SHA
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB

.rmnet
Size: 60KB - Virtual size: 60KB