96e8627241b0001890e3be2bc342e6be0eb1adf5074f827e7201ca86dc6f498e

Sharing

Copy URL

Twitter E-mail

General

Target

96e8627241b0001890e3be2bc342e6be0eb1adf5074f827e7201ca86dc6f498e
Size

248KB
MD5

8ff59cfcae71453e1c43d102d036097d
SHA1

2df8c724377cd15941cff21108ad845c5f24669c
SHA256

96e8627241b0001890e3be2bc342e6be0eb1adf5074f827e7201ca86dc6f498e
SHA512

1b34b4927dfd8dae95421dc5effad097b9e5e9bf7d9fc9a5fabc3b7fdbe0508983301fd035b548191a2712f62e0f3339f7553d9cfebae1a268493ab8379e45c4
SSDEEP

3072:GZi5dNjXqjreSByf6wwhDIaEq8oiFb2B7yYfx4qJIo9FvQiY0Wt:Ii5dNkecyiwsIbhFbo3QiHW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96e8627241b0001890e3be2bc342e6be0eb1adf5074f827e7201ca86dc6f498e

Files

96e8627241b0001890e3be2bc342e6be0eb1adf5074f827e7201ca86dc6f498e
.dll windows:4 windows x86 arch:x86

664a82051fb4113eb9ddae2a59f39272

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalGetAtomNameA
lstrcatA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
EnterCriticalSection
GetCurrentProcess
SetFilePointer
FlushFileBuffers
SetEndOfFile
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
GetACP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
LeaveCriticalSection
DeleteCriticalSection
GetVersion
InitializeCriticalSection
SetLastError
lstrcmpA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVolumeInformationA
CreateEventA
ResetEvent
SetEvent
GetTickCount
CreateThread
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
lstrlenA
lstrcmpiA
lstrcpynA
CreateFileA
WriteFile
GlobalAddAtomA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetThreadPriority
GetLastError
FormatMessageA
LocalFree
CloseHandle
Sleep
ReadFile

user32

GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DefWindowProcA
GetDlgCtrlID
GetWindowTextA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
IsWindowEnabled
GetWindowLongA
EnableWindow
LoadStringA
UnhookWindowsHookEx
SendMessageA
MessageBoxA
SetTimer
KillTimer
wsprintfA
PostMessageA
RegisterWindowMessageA
DestroyWindow
ReleaseDC
GetDC
GetDlgItem
SetWindowPos
GetWindowRect
SetWindowTextA
UpdateWindow
SetDlgItemTextA
CreateDialogParamA
GetLastActivePopup

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetTextColor
GetDeviceCaps
CreateBitmap
SetBkColor
GetObjectA

rtdb

??1CRtDbTblInter@@UAE@XZ
?GetOffset@OnlDbFldTbl@@QBEKXZ
?GetType@OnlDbFldTbl@@QBEGXZ
GetIndex
?GetOffset@OnlDbFldTbl@@QAEKK@Z
?GetFldValue@@YAHHPBD00PAD@Z
GetRecNum
?GetSize@OnlDbFldTbl@@QBEKXZ
?GetDbFldTbl@CRtDbTblInter@@QAEPAVOnlDbFldTbl@@PAVCOnlDb@@PBD11@Z
?GetOnlDB@CRtDbTblInter@@QAEPAVCOnlDb@@PBD0@Z
?GetPartName@CRtDbTblInter@@QAEPADPBD0@Z
?GetShareMemory@CShMemo@@QAEPAXXZ
GetCfgValue
??0CRtDbTblInter@@QAE@XZ

comctl32

ord17

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

AddVarChgCfg
AskAllIO
BeginCheckPIS
CheckHardDiskSerialNumber
CheckPanelInitialState
ClearAllOverControl
ClearDPUFlag
ClearInputRecordTable
CopyBlocks
CreateBlock
DeleteBlock
EndRealtimeDatabase
FindBlock
FindPrevNextBlock
GetAlgCount
GetAlgInfoByIndex
GetAlgInfoByName
GetAlgName
GetBlockCount
GetBlockDsc
GetBlockInfo
GetBlockInfoByIndex
GetBlockInfoString
GetBlockInfoString_X
GetBlockInfo_X
GetBlockNameByIndex
GetBlockRate
GetBlockSignValue
GetBlockStatus
GetBlockTagDsc
GetBlockValue
GetBreakPointFlag
GetBreakPointNum
GetDPUFlag
GetSimulationTimes
GetTempStop
GetValueAndTypeByTagname
GetValueByHand
GetValueByTagname
GetValueByTagnameNew
GetVarChgCfg
GetVarChgTable
Get_ModelExeCount
Get_Replaying
InitAlgLibrary
InitRecordDB
InputAssociate
LoadCondition
LoadCurrentModel
LoadTableIO
Load_TBL_File
LoggerOut
MoveBlocksTo
NewBlockExeTable
NewModelFunc
OperatorRecoad
OutputAssociate
ReInitAlgLibrary
RefreshTimeWin
RegisterSoftWare
RenameBlock
RestoreCalc
ReturnModelCalcStatus
RunPoint
RunStep
SaveCondition
SaveCurrentModel
Save_TBL_File
SearchBlockByInputVNBlurry
SearchBlockByOutputVNBlurry
SearchBlockByRate
SearchBlockOnAlgName
SearchBlockOnKeyword
SendAllDoAoAgain
SetBlockAccelSpeed
SetBlockDsc
SetBlockInputName
SetBlockOutputName
SetBlockRate
SetBlockRateName
SetBlockStatus
SetBlockStatusA
SetBlockTagDsc
SetBlockValue
SetBreakPointFlag
SetBreakPointNum
SetFlagDisplayIOinInfo
SetFlagDisplayIOinInfo_X
SetFlagDisplayIOoutInfo
SetFlagDisplayIOoutInfo_X
SetFlagEnableLocalIO
SetFlagEnableMMIIO
SetFlagEnableOS265IO
SetFlagEnablePanelIO
SetFlagLinkDCalc
SetFlagReLinkDCalc
SetLogWnd
SetModelAccelSpeed
SetTempStop
SetValueByHand
SetValueByTagname
Set_ModelExeCount
SethWndWaitPromptLabel
SetvgRootPath
StartCalc
StartPoint
StartRealtimeDatabase
StartRefreshWaitWinThread
StartReplay
StartStep
StartTimeWin
StopCalc
StopIO
StopPoint
StopRefreshWaitWinThread
StopReplay
StopStep
StopTimeWin
ocGetOCStateValueByHandle
ocGetTagHandleByVN
ocGetValueByHandle
ocSetValueByHandle

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

664a82051fb4113eb9ddae2a59f39272

Headers

File Characteristics

Imports

kernel32

user32

gdi32

rtdb

comctl32

winspool.drv

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 20KB - Virtual size: 4.9MB

.rsrc Size: 4KB - Virtual size: 280B

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 20KB - Virtual size: 4.9MB

.rsrc
Size: 4KB - Virtual size: 280B

.reloc
Size: 28KB - Virtual size: 27KB