E:\戴玉国工作文件\免驱设备通信库\Release\PCPS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PCPS.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
PCPS.dll
Resource
win10v2004-20240426-en
General
-
Target
PCPS.dll
-
Size
772KB
-
MD5
14bc9f54669ccfaa3fb73d63c9285905
-
SHA1
cabb29263aa7a1460a52cc73c9b12004f726e944
-
SHA256
fefcb39a20d096134bb40790346e06ad22616f40da1984594d3d0d3c98230d1f
-
SHA512
a901812cb29f1e6aff95cce05c7a4b969870051285b241519af179cf3eac855e80faa1954a1f087463392002c9fb9a3d98994b38a3681d024620085ccf671c57
-
SSDEEP
24576:++5TmbIM9m8TzlCdpScyT3HvvqwXJ/893d7qo:5kIN8TzlCdpScyT3nqGGqo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PCPS.dll
Files
-
PCPS.dll.dll windows:6 windows x86 arch:x86
e6f015a7f096069be6a54894fff60464
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
PathFileExistsA
setupapi
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
kernel32
FormatMessageW
OutputDebugStringA
SetEndOfFile
CreateFileW
HeapSize
ReadConsoleW
WriteConsoleW
CreateFileA
ReadFile
WriteFile
CloseHandle
GetLastError
SetupComm
GetCommState
GetCommTimeouts
SetCommState
SetCommTimeouts
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
GetLocalTime
GetFileSize
SetFilePointer
CreateThread
TerminateThread
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
DeviceIoControl
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
RaiseException
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
OutputDebugStringW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlUnwind
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapReAlloc
GetCurrentThread
GetACP
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetTimeZoneInformation
SetStdHandle
Exports
Exports
ClearCrashRecord
ClearFingerprintPattern
ClearRecord
DeleteDFile
DeviceInitialize
DongleRead
DongleWrite
DownloadFont
DownloadLogo
DownloadRes
EnterSelfTest
EnumDeviceByDeviceType
EnumDeviceByProtocolAndPort
EnumDongle
EnumEventPatrolDevice
EnumItemPatrolDevice
EnumNoDriverStickDevice
GetConfig
GetCrashRecord
GetCrashRecordCount
GetDFileInfo
GetDeviceID
GetDevicePath
GetDeviceTime
GetDeviceType
GetEventName
GetEventRecord
GetFingerprintPattern
GetFingerprintStatus
GetInspectorInfo
GetItemRecord
GetNetConfig2
GetRecordBytes
GetRecordCapacity
GetRecordCount
GetSpotInfo
GetStickRecord
GetVersionString
ReadDFile
SendStringCommand
SetAlarm
SetConfig
SetContacts
SetCurrentInspector
SetDeviceID
SetDeviceTime
SetDeviceTimeEx
SetDeviceType
SetEquipmentSpot
SetEventName
SetEventName2
SetFingerVerify
SetFingerprintPattern
SetFingerprintSecurityLevel
SetInspectorInfo
SetItemLogic
SetItemLogic2
SetItemName
SetItemName2
SetItemUnit
SetItemUnit2
SetMACAddress
SetNetConfig
SetNetConfig2
SetNetworkInfo
SetNetworkModuleInfo
SetRecordCapacity
SetRouteName
SetSpotInfo
UpdateSoftware
WriteItemRecord
_Java_PCPS_DFile_DeleteDFile@16
_Java_PCPS_DFile_OpenDFile@16
_Java_PCPS_DFile_ReadDFile@24
_Java_PCPS_EventPatrol_EnumDevice@8
_Java_PCPS_EventPatrol_GetPatrolGRecord@20
_Java_PCPS_EventPatrol_GetPatrolRecord@20
_Java_PCPS_EventPatrol_SetCurrentInspector@16
_Java_PCPS_EventPatrol_SetEventName@20
_Java_PCPS_EventPatrol_SetInspectorInfo@32
_Java_PCPS_EventPatrol_SetLineName@20
_Java_PCPS_EventPatrol_SetSpotInfo@32
_Java_PCPS_Fingerprint_ClearFingerprintPattern@12
_Java_PCPS_Fingerprint_GetFingerprintPattern@16
_Java_PCPS_Fingerprint_GetFingerprintStatus@12
_Java_PCPS_Fingerprint_SetFingerprintPattern@20
_Java_PCPS_ItemPatrol_EnumDevice@8
_Java_PCPS_ItemPatrol_GetPatrolGRecord@20
_Java_PCPS_ItemPatrol_GetPatrolRecord@20
_Java_PCPS_ItemPatrol_SetCurrentInspector@16
_Java_PCPS_ItemPatrol_SetInspectorInfo@32
_Java_PCPS_ItemPatrol_SetItemName@20
_Java_PCPS_ItemPatrol_SetLineName@20
_Java_PCPS_ItemPatrol_SetLogicName@20
_Java_PCPS_ItemPatrol_SetSpotInfo@32
_Java_PCPS_ItemPatrol_SetUnitName@20
_Java_PCPS_Patrol_ClearCrashRecord@12
_Java_PCPS_Patrol_ClearPatrolRecord@12
_Java_PCPS_Patrol_EnumDevice_1USB_1V2@8
_Java_PCPS_Patrol_GetCrashRecord@20
_Java_PCPS_Patrol_GetCrashRecordCount@12
_Java_PCPS_Patrol_GetDeviceID@12
_Java_PCPS_Patrol_GetDevicePath@12
_Java_PCPS_Patrol_GetDeviceTime@12
_Java_PCPS_Patrol_GetDeviceType@12
_Java_PCPS_Patrol_GetPatrolRecordCapacity@12
_Java_PCPS_Patrol_GetPatrolRecordCount@12
_Java_PCPS_Patrol_GetVersionString@12
_Java_PCPS_Patrol_SetDeviceTime@12
_Java_PCPS_Patrol_SetDeviceTimeEx@36
_Java_PCPS_Patrol_SetNetConfig2@56
_Java_PCPS_Patrol_SetNetConfig@48
_Java_PCPS_StickPatrol_EnumDevice@8
_Java_PCPS_StickPatrol_GetPatrolRecord@20
Sections
.text Size: 631KB - Virtual size: 630KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ