550450ddea5980ead356c3dab46f1a08e73ed9a3911cf0629016919cce0383a5

Sharing

Copy URL Twitter E-mail

General

Target

550450ddea5980ead356c3dab46f1a08e73ed9a3911cf0629016919cce0383a5
Size

58KB
MD5

2f30d85e2d65009b9646b7dfba42f0ab
SHA1

d07a1fe3c68690df367dbe4df5f554947c706e06
SHA256

550450ddea5980ead356c3dab46f1a08e73ed9a3911cf0629016919cce0383a5
SHA512

41ecc02faa35f063aaf4ffa53c7add545e28cfc49ddbf1a40f140d0428e22910526b1ad26c400fa62d9b9819774a9ca0360c8988e2bb057227f57e3982bf66be
SSDEEP

768:1pjVlLhz2ZFbzA0bK/IBRhwEe6Ll8V63S4x2x1YTE4k1uGoMRCfKtx:/5WA0bK/Ktlsox85jR/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
550450ddea5980ead356c3dab46f1a08e73ed9a3911cf0629016919cce0383a5

Files

550450ddea5980ead356c3dab46f1a08e73ed9a3911cf0629016919cce0383a5
.dll windows:5 windows x86 arch:x86

6af15bc020209e26eba3104c86b5c2d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cm

VsID
Serial_Init
DLC_Set_
DLC_Channel_Set
Im_buff
CAN_COM_Block
CAN_Flow_Control_Setting
CAN_Initial
CM_Sleep
TxByte_TimeOut
TxFrame_TimeOut
RxByte_TimeOut
RxFrame_TimeOut
comm
CAN_RX_DATA
Test_Present_Mode_Select
Test_Present_Para_Time_Set
bAck_mode
SlaveDB_Change
Serial_COM_TxRx_Block
OBD2_Init_Function_Fast_Open
Para_Check_Sum
OBD2_Init_Function_Fast
DebugMode
Hw_Setting_Off
Actuator
CS_MODE
Menu_item_pos
Read_DB_Group_Text
Service_Text_Data
Screen_item
DB
STR_Put
STR_Len
Text_buff
STR_Cmp
Car1_pos
PutSubMenu_B
Message
DRW_Line
Box
PutTitle
Error_Message
Text_buff1
PositionClear
CUR_Key
Guide_Repair_ScreenDisplay
Group_type
Mod_Change

kernel32

GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Exports

Exports

AB_MODULE_Init

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6af15bc020209e26eba3104c86b5c2d4

Headers

File Characteristics

Imports

cm

kernel32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB