60ac8824d71af5f35668c7d514b3f88204e1fd94c8a1c87ee5468b06722b8c75

Sharing

Copy URL

Twitter E-mail

General

Target

60ac8824d71af5f35668c7d514b3f88204e1fd94c8a1c87ee5468b06722b8c75
Size

65KB
MD5

6c15fcc16055c3544baad97f269270c9
SHA1

d080d5579ad02fe776211cec9d5613cf994da983
SHA256

60ac8824d71af5f35668c7d514b3f88204e1fd94c8a1c87ee5468b06722b8c75
SHA512

85424158e2a766a5a74cc38f9adbc7dd262cf77bf5d194c1ba542a85cfd791b995711780da740e979561b0ad08e9550c185c7706bbe1dd88d0085d0256243ab6
SSDEEP

1536:Tnpz6CWcKgDZ3byO/Xqb6YCnC3OfRVTQ:dz6CWcKgDZ3byO/6b6YgGOfRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ac8824d71af5f35668c7d514b3f88204e1fd94c8a1c87ee5468b06722b8c75

Files

60ac8824d71af5f35668c7d514b3f88204e1fd94c8a1c87ee5468b06722b8c75
.dll windows:5 windows x86 arch:x86

d7ea0626a4fc5cfc5969be60a6c3b726

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\192.168.2.24-SmartECGNet\SDK\Trunk\ECGView\ECGViewerOCX\Release\plugins\Preview.pdb

Imports

mfc100u

ord2884
ord2887
ord12606
ord5556
ord2980
ord2981
ord10412
ord10058
ord11123
ord11982
ord3446
ord1987
ord4290
ord5862
ord5799
ord4138
ord804
ord4767
ord374
ord2184
ord12186
ord265
ord266
ord8178
ord10057
ord5303
ord5811
ord4355
ord2185
ord5677
ord1934
ord12775
ord788
ord1212
ord4139
ord945
ord6159
ord11954
ord10906
ord9493
ord337
ord5801
ord11997
ord2614
ord286
ord2164
ord1312
ord5229
ord1905
ord897
ord5802
ord11210
ord8264
ord2418
ord12610
ord5558
ord2746
ord917
ord7929
ord3428
ord6870
ord11940
ord12948
ord4400
ord4744
ord4430
ord7385
ord4396
ord4434
ord4413
ord4379
ord4383
ord4416
ord3999
ord14067
ord3992
ord2665
ord13382
ord7109
ord13388
ord6156
ord10725
ord12557
ord5276
ord2339
ord11116
ord3491
ord2952
ord2951
ord2852
ord11159
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord13569
ord13571
ord13568
ord3416
ord5261
ord11228
ord11236
ord4086
ord7391
ord9498
ord2417
ord14146
ord14148
ord14147
ord14145
ord14149
ord14132
ord14059
ord14060
ord8277
ord11081
ord3402
ord10937
ord13380
ord8112
ord11163
ord6247
ord10045
ord8393
ord2853
ord12724
ord11246
ord11244
ord1501
ord1508
ord1514
ord1512
ord1519
ord4388
ord11240
ord11209
ord11845
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord6931
ord6932
ord6922
ord4792
ord7393
ord9328
ord8346
ord6140
ord3627
ord13605
ord322
ord7176
ord4421
ord4425
ord1292
ord890
ord4408
ord4392
ord5143
ord9333
ord8347
ord3397
ord8179
ord908
ord2091
ord2055
ord2053
ord2080
ord1984
ord2045
ord3413
ord408
ord1953
ord2090
ord2088
ord1945
ord1873
ord323
ord1301
ord12413
ord3978
ord13047
ord2756
ord1298
ord7973
ord4805
ord12951
ord4360
ord7006
ord9525
ord6711
ord3261
ord948
ord381
ord6344
ord296
ord902
ord1450
ord7624
ord7548
ord11784
ord13854
ord4404
ord6869
ord1300

msvcr100

strncpy
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
memset
memcpy
__CxxFrameHandler3
wcscpy_s

kernel32

IsProcessorFeaturePresent
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
LocalAlloc
LocalFree
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
MultiByteToWideChar

user32

GetCapture
GetCursorPos
GetSysColor
OffsetRect
DrawFocusRect
GetNextDlgGroupItem
ClientToScreen
WindowFromPoint
GetWindowLongW
GetParent
GetWindowRect
SetWindowRgn
DrawEdge
LoadBitmapW
GetForegroundWindow
ReleaseCapture
wsprintfW
EnumChildWindows
GetDlgCtrlID
SetWindowTextW
ReleaseDC
GetDC
InvalidateRect
EnableWindow
SendMessageW
PostMessageW
GetSystemMetrics
GetClientRect

gdi32

StartDocW
DeleteObject
SelectClipRgn
CreateRectRgn
CombineRgn
GetPixel
StretchBlt
SelectObject
GetObjectW
GetDeviceCaps
PatBlt
BitBlt
SetWindowOrgEx
ResetDCW
CreateCompatibleBitmap
CreateCompatibleDC
EndDoc
EndPage
StartPage

comctl32

_TrackMouseEvent

Exports

Exports

OnPrintPreview

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7ea0626a4fc5cfc5969be60a6c3b726

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc100u

msvcr100

kernel32

user32

gdi32

comctl32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1024B - Virtual size: 3KB

.rsrc Size: 22KB - Virtual size: 21KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1024B - Virtual size: 3KB

.rsrc
Size: 22KB - Virtual size: 21KB

.reloc
Size: 7KB - Virtual size: 6KB