2b27beba5b70364a598a38ecda9fd6c59e65ddd8d70fe7f9afd1c7a7732d8e72

General

Target

2b27beba5b70364a598a38ecda9fd6c59e65ddd8d70fe7f9afd1c7a7732d8e72
Size

44KB
MD5

f777e4a3ec4a3e440e6e455a2f11ced6
SHA1

45babdb8d06852451204595ccb524aeaa225754c
SHA256

2b27beba5b70364a598a38ecda9fd6c59e65ddd8d70fe7f9afd1c7a7732d8e72
SHA512

7216a2888873ea48e2b19f9d52b1908d9903cac2fbc0118aebf91c68098a68ffbb19c7d305af7d048d1c8f9c0a4def3bcd7e72c4b246055c5d3e80d68a9364b8
SSDEEP

384:pZ3IEm8VRFwTxvSNN4TGErWfmlqoho+QyxNW3KZhe6VJNrjX2DNuJgPupXo9Ianq:v9Kxvy4Trr0kQue6lGDN34Xo95UVEQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b27beba5b70364a598a38ecda9fd6c59e65ddd8d70fe7f9afd1c7a7732d8e72

Files

2b27beba5b70364a598a38ecda9fd6c59e65ddd8d70fe7f9afd1c7a7732d8e72
.dll windows:4 windows x86 arch:x86

afdc4986688c554b1231b56f4bd97f38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetLastError
CloseHandle
DeviceIoControl
FormatMessageA
GetOverlappedResult
GetTickCount
WriteFile
ReadFile
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

Exports

Exports

TiglUsbCheck
TiglUsbClose
TiglUsbFlush
TiglUsbGetTimeout
TiglUsbOpen
TiglUsbRead
TiglUsbSetTimeout
TiglUsbVersion
TiglUsbWrite

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afdc4986688c554b1231b56f4bd97f38

Headers

File Characteristics

Imports

kernel32

setupapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB