mwrf32_URF-R330[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

mwrf32_URF-R330.dll
Size

112KB
MD5

12c8f46b845353a6874d008b97170017
SHA1

8ccc11c91e088ce0d7467661a538dc0c2effe41b
SHA256

1db28890494efabfffb1f691dd281f911f3ba5117073e732a81f7b325a7f4b75
SHA512

1e16f532a64aa96b55a5ced6f4dc59218696b83621200f2b09fb08e117fec9799be520aa19f5d387c7ab4fa36e10eb8f34f25837285adca5f6723ae0ef27fc9f
SSDEEP

1536:zLFfoRd9a6wYXWwVTRApM3WwmzcPBMRGWMfAlmCe+FQoIs+EJkPELE8oiZsHcdMO:/Ffow6Dv9ApzzdxQoI4d19v9ltfo8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mwrf32_URF-R330.dll

Files

mwrf32_URF-R330.dll
.dll windows:4 windows x86 arch:x86

22954c0097f000f631ee5ade71c00edb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommState
SetCommState
SetCommMask
CreateFileA
CloseHandle
GetVersionExA
ClearCommError
PurgeComm
SetupComm
SetCommTimeouts
ReadFile
WriteFile
GetLastError
GetTickCount
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers

advapi32

RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

hid

HidD_GetHidGuid
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetFeature
HidD_GetAttributes
HidD_FreePreparsedData
HidD_SetFeature

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

Exports

Exports

ARM_sam_sel_pps
ARM_sam_sel_rst
ARM_sam_sel_trn
AT45DB161B_Read
AT45DB161B_Write
FM24C16_Read
FM24C16_Write
FNK_CheckCard
FNK_PushCard
Get_Keyboard
IO_Input_Control
IO_Output_Control
LCD_Clear
LCD_Line
LCD_Off
LCD_On
LCD_move_cursor
SeekCard
Set_Reader_Mode
TCL_Command_PPS
a_hex
at080_authen
at080_commit
at080_common_decrement
at080_decrement
at080_halt
at080_increment
at080_read
at080_read_val
at080_request
at080_write
at080_write_afi
at080_write_key
at080_write_val
at88rf020_check
at88rf020_count
at88rf020_deselect
at88rf020_lock
at88rf020_read
at88rf020_write
des_op
hex_a
lib_ver
mf2_protocol
open_card
rf_HL_authentication
rf_HL_decrement
rf_HL_increment
rf_HL_initval
rf_HL_read
rf_HL_readhex
rf_HL_write
rf_HL_writehex
rf_alarm_EAS
rf_anticoll
rf_anticoll_level
rf_apdu_trn
rf_attrib
rf_authentication
rf_authentication_2
rf_authentication_key
rf_beep
rf_card
rf_changeb3
rf_check_write
rf_check_writehex
rf_clear_EAS
rf_clr_control_bit
rf_comm_check
rf_config
rf_config_mode
rf_cpu_rst
rf_cpu_trn
rf_ctl_mode
rf_decrement
rf_decrement_ml
rf_decrement_transfer
rf_decrypt
rf_desfile_ats
rf_desfile_pps
rf_desfile_trn
rf_disp
rf_disp8
rf_disp_mode
rf_disp_val
rf_eas
rf_encrypt
rf_exit
rf_fast_inventory_read
rf_get_datalen
rf_get_mulblock_security
rf_get_snr
rf_get_status
rf_get_sysinfo
rf_get_timeslots
rf_getport
rf_gettime
rf_gettimehex
rf_halt
rf_haltb
rf_icode_anticoll
rf_icode_config
rf_icode_get_info
rf_icode_get_port
rf_icode_halt
rf_icode_read
rf_icode_read_unselected
rf_icode_set_port
rf_icode_write
rf_increment
rf_init
rf_initval
rf_initval_ml
rf_inventory
rf_inventory_read
rf_load_key
rf_load_key_hex
rf_lock_2_blocks
rf_lock_AFI
rf_lock_DSFID
rf_lock_EAS
rf_lock_block
rf_pro_halt
rf_pro_rst
rf_pro_trn
rf_read
rf_read_hex
rf_read_mulblock
rf_readval
rf_readval_ml
rf_request
rf_request_std
rf_requestb
rf_reset
rf_reset_quiet_bit
rf_reset_to_ready
rf_restore
rf_sam_off
rf_sam_rst
rf_sam_sel_pps
rf_sam_sel_rst
rf_sam_sel_trans
rf_sam_sel_trn
rf_sam_trn
rf_select
rf_select_2
rf_select_protocal
rf_select_uid
rf_set_485
rf_set_EAS
rf_set_control_bit
rf_setbright
rf_setport
rf_settime
rf_settimehex
rf_srd_eeprom
rf_srd_snr
rf_stay_quiet
rf_swr_eeprom
rf_swr_snr
rf_transfer
rf_write
rf_write_2_blocks
rf_write_AFI
rf_write_DSFID
rf_write_hex
rf_write_mulblock
rf_write_single_block
set_host_485
set_host_check
set_work_mode
srix4k_completion
srix4k_getuid
srix4k_poll
srix4k_read
srix4k_reset_to_inventory
srix4k_select
srix4k_write
usb_set_timeouts

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22954c0097f000f631ee5ade71c00edb

Headers

File Characteristics

Imports

kernel32

advapi32

hid

setupapi

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 4KB - Virtual size: 3KB